Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/gentilkiwi/kekeo
A little toolbox to play with Microsoft Kerberos in C
https://github.com/gentilkiwi/kekeo
Last synced: about 1 month ago
JSON representation
A little toolbox to play with Microsoft Kerberos in C
- Host: GitHub
- URL: https://github.com/gentilkiwi/kekeo
- Owner: gentilkiwi
- Created: 2015-01-13T21:24:09.000Z (over 9 years ago)
- Default Branch: master
- Last Pushed: 2021-12-14T10:56:48.000Z (almost 3 years ago)
- Last Synced: 2024-05-02T17:53:10.665Z (5 months ago)
- Language: C
- Size: 1.56 MB
- Stars: 1,338
- Watchers: 67
- Forks: 206
- Open Issues: 13
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-hacking-lists - gentilkiwi/kekeo - A little toolbox to play with Microsoft Kerberos in C (C)
README
# kekeo
**`kekeo`** is a little toolbox I have started to manipulate Microsoft Kerberos in C (and for fun)
## ASN.1 library
In `kekeo`, I use an external commercial library to deal with Kerberos ASN.1 structures: **OSS ASN.1/C** (http://www.oss.com/asn1/products/asn1-c/asn1-c.html)
It was the **only** code generator/library that I've found to work easily with Microsoft C project.
* works without a lots of dependencies;
* magical documentation;
* wonderful support for my stupid questions;
* had a binary that work only few hours after started my project...
They were kind enough to offer me a 1-year licence.
With this one, I'm able to let you download binaries that run in your environment.
So don't forget to thank them ( http://www.oss.com/company/contact-us.html / https://twitter.com/OSSNokalva )
### Limitations
* Binaries will work until December 21, 2017 (yeah, 1 year licence ;));
* You must buy a licence from **OSS ASN.1/C** (_or download a trial version_) to build `kekeo` solution/adapt it.
* http://www.oss.com/asn1/products/asn1-c/asn1-c.html
* When you register for a free trial, don't forget to refer me in the description field ;) (`kekeo` or `gentilkiwi`)
### Building `kekeo` with ASN.1/C
You **can't** build `kekeo` out-of-the-box, you'have to generate C files and link with OSS libraries.
After downloading and installing a commercial/trial version of **OSS ASN.1/C**, `Win32` and/or `x64`:
1. Open a command prompt in `($kekeo)\modules\asn1`
2. Adapt the `ASN1C` variable to your ASN.1/C configuration (architecture & version)
```
set ASN1C="C:\Program Files\OSS Nokalva\ossasn1\winx64\10.4.0"
```
3. Depending on the targeted lib architecture:
* `Win32`
```
%ASN1C%\bin\asn1.exe ^
%ASN1C%\asn1dflt\asn1dflt.ms.zp4 ^
KerberosV5Spec2.asn KerberosV5-PK-INIT-SPEC.asn PKIX1Explicit88.asn PKINIT.asn MS-SFU-KILE.asn ^
-noSampleCode -der -root -CStyleComments -externalName kekeo_asn1 -messageFormat msvc -verbose ^
-headerFile kull_m_kerberos_oss_asn1_internal.h -soedFile kull_m_kerberos_oss_asn1_internal_Win32.c
```
* `x64`
```
%ASN1C%\bin\asn1.exe ^
%ASN1C%\asn1dflt\asn1dflt.msx64.zp8 ^
KerberosV5Spec2.asn KerberosV5-PK-INIT-SPEC.asn PKIX1Explicit88.asn PKINIT.asn MS-SFU-KILE.asn ^
-noSampleCode -der -root -CStyleComments -externalName kekeo_asn1 -messageFormat msvc -verbose ^
-headerFile kull_m_kerberos_oss_asn1_internal.h -soedFile kull_m_kerberos_oss_asn1_internal_x64.c
```
Header file `kull_m_kerberos_oss_asn1_internal.h` is the same for both architecture.
3. Copy from **OSS ASN.1/C** install dir (eg: `C:\Program Files\OSS Nokalva\ossasn1\winx64\10.4.0`)
* `include\ossasn1.h` to `($kekeo)\inc`
* `include\osstype.h` to `($kekeo)\inc`
* `lib\soeddefa.lib`to `($kekeo)\lib\{Win32 or x64}`
* `lib\ossiphlp.lib`to `($kekeo)\lib\{Win32 or x64}`
You can now build the `kekeo` solution in **Visual Studio**
## Licence
CC BY-NC-SA 4.0 licence - https://creativecommons.org/licenses/by-nc-sa/4.0/
## Acknowledgements
* Tom Maddock - Qualcomm - @ubernerdom - MS14-068 - https://www.qualcomm.com/
* Sylvain Monné - Solucom - @BiDOrD - Author of `PyKek` - https://github.com/bidord/pykek
* Tal Be'ery - Aorato / Microsoft - @TalBeerySec - http://www.aorato.com/blog/active-directory-vulnerability-disclosure-weak-encryption-enables-attacker-change-victims-password-without-logged/
* Grace Sigona - OSS - @OSSNokalva - http://www.oss.com/
* Taylor Swift - @SwiftOnSecurity - https://twitter.com/SwiftOnSecurity/status/767788634904735745
* Seth Moore - Microsoft - @robododo - https://datatracker.ietf.org/doc/draft-ietf-kitten-pkinit-freshness/
* Alberto Solino - Core Security / Impacket - @agsolino - https://github.com/CoreSecurity/impacket
* Laurent Gaffié - @PythonResponder / @lgandx - https://github.com/lgandx/Responder / https://g-laurent.blogspot.com/
## Author
Benjamin DELPY `gentilkiwi`, you can contact me on Twitter ( @gentilkiwi ) or by mail ( benjamin [at] gentilkiwi.com )
This is a **personal** development, please respect its philosophy and don't use it for bad things!