Git Product home page Git Product logo

windows_protocol's People

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

windows_protocol's Issues

0x04 AS_REP中ticket段是否存在错别字?

在0x04 AS_REP 4. ticket段中,“在AS_REQ请求里面,是使用krbtgt的hash进行加密的“
这句话里的 “AS_REQ“ 是否应该为 “TGS_REQ”,因为 “AS_REQ” 是使用用户的HASH 加密的时间戳。

关于ntlm中继问题

您好,daiker,在阅读您的文章的时候发现一个问题,您有提到消息的传输依赖于使用ntlm的上层协议,比如SMB,LDAP,HTTP,微软在ms08-068中对smb reflect到smb 做了限制,通过缓存(Challenge,cifs/b)来防止中继
但是在CVE-2019-1040中复现的时候需要让域控和会连的ldap不要再同一个域控上,我在本地测试的时候使用同一个域控会返回ntlm认证失败8009030C: LdapErr: DSID-0C0905FB, comment: AcceptSecurityContext error, data 52e, v2580,产生这个错误的原因是ms08-068对于ntlm认证的修补还是其他原因呢,期待您的回复,谢谢

工具连接出现错误

在连接之后发包看errorcode是14,kdc_err_etype_nosupp
应该是加密方式不支持吗?

Kerberos_gui测试as-rep roast时存在bug

as-rep roast测试时,选中rc4等加密方式后,发送报文会直接闪退,但是报文被正确发送了,并且收到了正确的as-rep
image
image
image
大佬如果可以的话,能不能修复一下这个问题,或者公布一下工具的源码,大火修复一下

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.