admin/sploutchy-impacket
1
0
Fork 0
mirror of https://github.com/sploutchy/impacket synced 2026-06-08 17:32:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

Adding the actual SPN to the JtR output produced (and saved via -outputfile)

Browse Source 
* Now -outputfile automatically selects -request
This commit is contained in:
asolino
2016-06-21 15:36:31 -03:00
parent d6c065a820
commit 9aeee403ca
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
examples/GetUserSPNs.py
+5 -5
View File
@@ -146,7 +146,7 @@ class GetUserSPNs:
return TGT
def outputTGS(self, tgs, oldSessionKey, sessionKey, username, fd=None):
def outputTGS(self, tgs, oldSessionKey, sessionKey, username, spn, fd=None):
decodedTGS = decoder.decode(tgs, asn1Spec=TGS_REP())[0]
# According to RFC4757 the cipher part is like:
@@ -161,8 +161,8 @@ class GetUserSPNs:
# In short, we're interested in splitting the checksum and the rest of the encrypted data
#
if decodedTGS['ticket']['enc-part']['etype'] == constants.EncryptionTypes.rc4_hmac.value:
entry = '$krb5tgs$%d$*%s$%s$SPN*$%s$%s' % (
constants.EncryptionTypes.rc4_hmac.value, username, decodedTGS['ticket']['realm'],
entry = '$krb5tgs$%d$*%s$%s$%s*$%s$%s' % (
constants.EncryptionTypes.rc4_hmac.value, username, decodedTGS['ticket']['realm'], spn,
hexlify(str(decodedTGS['ticket']['enc-part']['cipher'][:16])),
hexlify(str(decodedTGS['ticket']['enc-part']['cipher'][16:])))
if fd is None:
@@ -329,7 +329,7 @@ class GetUserSPNs:
self.__kdcHost,
TGT['KDC_REP'], TGT['cipher'],
TGT['sessionKey'])
self.outputTGS(tgs, oldSessionKey, sessionKey, user, fd)
self.outputTGS(tgs, oldSessionKey, sessionKey, user, SPN, fd)
except Exception , e:
logging.error(str(e))
if fd is not None:
@@ -397,7 +397,7 @@ if __name__ == '__main__':
if options.aesKey is not None:
options.k = True
if options.save is True:
if options.save is True or options.outputfile is not None:
options.request = True
try: