Version should be 1 . about adfspoof HOT 9 OPEN

yes, DKMkey.bin should be HEX representation of actual ANSI bytes.
In screenshot I see a lot of zeros, remove everything after 72 CB

from adfspoof.

Ha!
Welcome to the club! (ppl who didn't read readme :) )
Steps to fix this:

1. pip uninstall cryptography
2. git clone https://github.com/dmb2168/cryptography.git
3. cd cryptography
4. pip install -e .

Have fun!

from adfspoof.

Hi! In my case I used 'cat DKMkey.txt | tr -d "-" | xxd -r -p > DKMkey.bin'. I think it works the same but I did not get the zeros :)

from adfspoof.

Thank you! It worked, though only on Linux. On Windows I am getting installation error when installing crypthography.

from adfspoof.

@pawp81
correct way to create DKM key:
a) take private key
b) take hex editor and paste in the bytes ( private key without dashes) and save as DKMkey.bin

from adfspoof.

Thank you. I see DKM key extracted from Active Directory already comes in HEX.
Do you mean that DKM key should be HEX representation of actual ANSI bytes?
Taking my DKM key as example and https://hexed.it/ as Hex editor example, this what I should?

from adfspoof.

Thank you I am getting closer
Now I am getting:
Calculated MAC did not match anticipated MAC
Calculated MAC: b'H\x03\xbauF\x02\xed\x87%\x7f+\xafZ\x95\xdc\xd3\x0b\x05\x15O\x12\xf69\xc5\x9a\xb6!;\x83\xea_\x03'
Expected MAC: b'\xc0\xae\x84\x8f\x0cm\x16g\x1c\x1axnV\x83\xed\x08I\x1dAv\xa5m^\x91]\xd8o\xf1\xb8\x14\x8b\x04'

What do you do with EncryptedPFX? Do you just base64 decode the output from ADFSDump?
cat Token_sign_blob_ADFS2019.txt | base64 -d >Token_sign_blob_ADFS2019.bin

from adfspoof.

Hey!
If the method does not work, This what worked for me :

1. Create of virtual environments in python
2. git clone https://github.com/dmb2168/cryptography.git
3. cd cryptography
4. pip3 install pyopenssl --upgrade -e .

from adfspoof.

Hey @0xMazen @duzvik
Please help me im also getting the same error
A tool to for AD FS security tokens
Created by @doughsec

Calculated MAC did not match anticipated MAC
Calculated MAC: b"e\xec|[\x17?.\xffC'v(u\xaaBiw\x90\xfb\x1c\xd4H\xf7LM\x13\x87+G\x99mX"
Expected MAC: b"{\xad\xa9}\x02\xfa]\xdb\xcb\x95\x15p \x1c\x9c\xed\xbcC/\xc1\xef\xc0f\xd1\x93D'\xeb\xb0\x8a\xc0\xe1"

i have tried to install this but its not being installed at
git clone https://github.com/dmb2168/cryptography.git

any other version of cryptography im able to install

from adfspoof.