head 1.16; access; symbols pkgsrc-2026Q1:1.16.0.4 pkgsrc-2026Q1-base:1.16 pkgsrc-2025Q4:1.16.0.2 pkgsrc-2025Q4-base:1.16 pkgsrc-2025Q3:1.15.0.4 pkgsrc-2025Q3-base:1.15 pkgsrc-2025Q2:1.15.0.2 pkgsrc-2025Q2-base:1.15 pkgsrc-2025Q1:1.14.0.4 pkgsrc-2025Q1-base:1.14 pkgsrc-2024Q4:1.14.0.2 pkgsrc-2024Q4-base:1.14 pkgsrc-2024Q3:1.13.0.2 pkgsrc-2024Q3-base:1.13 pkgsrc-2024Q2:1.12.0.4 pkgsrc-2024Q2-base:1.12 pkgsrc-2024Q1:1.12.0.2 pkgsrc-2024Q1-base:1.12 pkgsrc-2023Q4:1.11.0.10 pkgsrc-2023Q4-base:1.11 pkgsrc-2023Q3:1.11.0.8 pkgsrc-2023Q3-base:1.11 pkgsrc-2023Q2:1.11.0.6 pkgsrc-2023Q2-base:1.11 pkgsrc-2023Q1:1.11.0.4 pkgsrc-2023Q1-base:1.11 pkgsrc-2022Q4:1.11.0.2 pkgsrc-2022Q4-base:1.11 pkgsrc-2022Q3:1.10.0.4 pkgsrc-2022Q3-base:1.10 pkgsrc-2022Q2:1.10.0.2 pkgsrc-2022Q2-base:1.10 pkgsrc-2022Q1:1.9.0.2 pkgsrc-2022Q1-base:1.9 pkgsrc-2021Q4:1.7.0.2 pkgsrc-2021Q4-base:1.7 pkgsrc-2021Q3:1.4.0.6 pkgsrc-2021Q3-base:1.4 pkgsrc-2021Q2:1.4.0.4 pkgsrc-2021Q2-base:1.4 pkgsrc-2021Q1:1.4.0.2 pkgsrc-2021Q1-base:1.4 pkgsrc-2020Q4:1.3.0.6 pkgsrc-2020Q4-base:1.3 pkgsrc-2020Q3:1.3.0.4 pkgsrc-2020Q3-base:1.3 pkgsrc-2020Q2:1.3.0.2 pkgsrc-2020Q2-base:1.3; locks; strict; comment @# @; 1.16 date 2025.11.11.14.09.00; author adam; state Exp; branches; next 1.15; commitid bAiLhlaLK8nUR8iG; 1.15 date 2025.04.15.08.15.58; author adam; state Exp; branches; next 1.14; commitid OfqXjS34Zs7wF7RF; 1.14 date 2024.11.11.07.28.48; author wiz; state Exp; branches; next 1.13; commitid 1fBDq3LwS98NncxF; 1.13 date 2024.09.18.09.13.09; author adam; state Exp; branches; next 1.12; commitid JOMlwqVbWknxHgqF; 1.12 date 2024.02.29.20.56.48; author adam; state Exp; branches; next 1.11; commitid oj8zcTSBZbBw5n0F; 1.11 date 2022.10.19.14.25.19; author nia; state Exp; branches; next 1.10; commitid 7T3HKpOITEXwVkYD; 1.10 date 2022.04.29.11.56.44; author wiz; state Exp; branches; next 1.9; commitid 8UvhVjMDDlJcF5CD; 1.9 date 2022.01.05.15.41.16; author wiz; state Exp; branches; next 1.8; commitid FQ77UruBIUsgzsnD; 1.8 date 2022.01.04.20.54.28; author wiz; state Exp; branches; next 1.7; commitid CYyhdK9qtoffkmnD; 1.7 date 2021.12.01.16.29.05; author adam; state Exp; branches; next 1.6; commitid RNDpvpwROdSWXXiD; 1.6 date 2021.11.10.10.56.10; author adam; state Exp; branches; next 1.5; commitid DZyU14kccv1oNegD; 1.5 date 2021.09.27.19.00.28; author adam; state Exp; branches; next 1.4; commitid Q8GJdxCxoEqaTCaD; 1.4 date 2021.01.20.09.08.46; author adam; state Exp; branches; next 1.3; commitid 4gJ1rnV1xM3xErEC; 1.3 date 2020.05.26.22.30.50; author adam; state Exp; branches; next 1.2; commitid xdcJTUGsUa57MN9C; 1.2 date 2020.04.30.14.53.00; author nikita; state Exp; branches; next 1.1; commitid ny04luTa5PaM4q6C; 1.1 date 2020.04.30.12.17.33; author nikita; state Exp; branches; next ; commitid LHVFhIM2TjVScp6C; desc @@ 1.16 log @py-impacket: updated to 0.13.0 Impacket v0.13.0 (Oct 2025): 1. Library improvements * Major SMB client/server refactor adds setInfo support, CIFS datetime helpers, and safer default share access to enable remote attribute and timestamp management. (@@covertivy) * Introduced per-structure encoding selectors and UTF-8-aware SMB structures so non-Latin resource names round-trip correctly. (@@alexisbalbachan) * Strengthened LDAP/Kerberos handling with channel binding plus signing, schema alignment with ldap3, and LDAPS-based LAPS retrieval against Windows Server 2025 DCs. (@@zblurx, @@alexisbalbachan, @@Ibrahim8879) * Improved DCE/RPC coverage with Netlogon authenticator fixes, updated DRS bind flags, expanded EVEN6 decoding, and a new ICPR interface to support relay-aware RPC workflows. (@@ThePirateWhoSmellsOfSunflowers, @@h3-josh-the-engineer, @@NtAlexio2, @@rtpt-romankarwacik) * Corrected SMB negotiation edge cases by fixing response padding, Unicode pipe lookups, and keyboard interrupts in SMB servers. (@@rtpt-erikgeiser, @@Abyss-emmm, @@exploide) * SMB Server enhancements to align Impacket's implementation with standard (@@jborean93) 2. Authentication & relay tooling * Added WinRMS relay clients/servers. (@@Defte_) * Improved IPv6 support, richer logging, and consistent console status reporting, plus an identity log to track compromised principals ( @@gabrielg5) * Introduced an RPC relay server with Endpoint Mapper discovery . (@@rtpt-romankarwacik) * Delivered SCCM Management/Distribution Point relay attacks. (@@q-roland) * Enhanced shadow credentials, SOCKS plugins, and target rotation with better IPv6 awareness and stability. (@@anadrianmanrique, @@gabrielg5) * Added options to strip SSP from Net-NTLMv1 captures and write relay-captured hashes for cracking workflows. (@@TurtleARM, @@p0rtL6) 3. Examples improvements * secretsdump.py gained a WMI shadow snapshot path, export hive boot key recovery, safer DRS flags, user-status reporting, and refined NTDS parsing. (@@PeterGabaldon, @@MaxToffy, @@h3-josh-the-engineer, @@Markb1337, @@snovvcrash) * MSSQL tooling gained channel binding tokens, restored reliable connections, richer linked-server file transfers, and inline command execution. (@@Defte_, @@rtpt-romankarwacik, @@trietend, @@kiriknik, @@Signum21) * Directory ACL helpers (`dacledit`, `owneredit`, `rbcd`, `ldapshell`) picked up mask selection, safer queries, and consistent `-dc-host` handling. (@@dadevel, @@shellinvictus, @@Fabrizzio53, @@ICheer_No0M, @@gabrielg5) * SMB operator utilities add reconnect and autocomplete options in smbclient and prevent smbexec from hanging on completion. (@@daddycocoaman, @@trietend, @@Vincent550102) * Remote access helpers such as rdp_check and wmiexec now support IPv6 targets and display created Process IDs for easier triage. (@@gabrielg5, @@alexisbalbachan) 4. New examples * [attrib.py](examples/attrib.py) manipulates file attributes over SMB to showcase the new setInfo workflow. (@@covertivy) * [filetime.py](examples/filetime.py) inspects and updates SMB file timestamps using the refreshed SMBConnection APIs. (@@covertivy) * [badsuccessor.py](examples/badsuccessor.py) demonstrates the AD CS “bad successor” attack path. (@@fulc2um) * [regsecrets.py](examples/regsecrets.py) extracts LSA secrets from remote registry hives through [MS-RRP]. (@@laxaa, @@laxa) * [samedit.py](examples/samedit.py) edits local SAM password hashes offline. (@@iorpim) * [CheckLDAPStatus.py](examples/CheckLDAPStatus.py) checks LDAP signing status and LDAPS channel binding status. (@@zblurx) 5. Project & packaging * Added the `impacket.mssql` namespace, relaxed the pyOpenSSL pin, and declared Python 3.13 support while dropping 3.8. (@@anadrianmanrique, @@Defte_) * Replaced pkg_resources with importlib.metadata for lightweight version discovery. (@@AdrianVollmer) @ text @# $NetBSD: Makefile,v 1.15 2025/04/15 08:15:58 adam Exp $ DISTNAME= impacket-0.13.0 PKGNAME= ${PYPKGPREFIX}-${DISTNAME} CATEGORIES= net python MASTER_SITES= ${MASTER_SITE_PYPI:=i/impacket/} MAINTAINER= pkgsrc-users@@NetBSD.org HOMEPAGE= https://www.secureauth.com/labs/open-source-tools/impacket COMMENT= Collection of Python classes for working with network protocols LICENSE= apache-1.1 DEPENDS+= ${PYPKGPREFIX}-asn1>=0.2.3:../../security/py-asn1 DEPENDS+= ${PYPKGPREFIX}-asn1-modules-[0-9]*:../../security/py-asn1-modules DEPENDS+= ${PYPKGPREFIX}-charset-normalizer-[0-9]*:../../converters/py-charset-normalizer DEPENDS+= ${PYPKGPREFIX}-cryptodome-[0-9]*:../../security/py-cryptodome DEPENDS+= ${PYPKGPREFIX}-flask>=1.0:../../www/py-flask DEPENDS+= ${PYPKGPREFIX}-ldap3>=2.6.1:../../databases/py-ldap3 DEPENDS+= ${PYPKGPREFIX}-ldapdomaindump>=0.9.0:../../net/py-ldapdomaindump DEPENDS+= ${PYPKGPREFIX}-setuptools>=78:../../devel/py-setuptools DEPENDS+= ${PYPKGPREFIX}-six-[0-9]*:../../lang/py-six TEST_DEPENDS+= ${PYPKGPREFIX}-coverage-[0-9]*:../../devel/py-coverage SUBST_CLASSES+= crypto SUBST_STAGE.crypto= pre-configure SUBST_MESSAGE.crypto= Switching from py-cryptodomex to py-cryptodome. SUBST_FILES.crypto+= examples/Get-GPPPassword.py SUBST_FILES.crypto+= examples/describeTicket.py SUBST_FILES.crypto+= examples/dpapi.py SUBST_FILES.crypto+= examples/goldenPac.py SUBST_FILES.crypto+= examples/mimikatz.py SUBST_FILES.crypto+= examples/rdp_check.py SUBST_FILES.crypto+= impacket/crypto.py SUBST_FILES.crypto+= impacket/dcerpc/v5/drsuapi.py SUBST_FILES.crypto+= impacket/dcerpc/v5/nrpc.py SUBST_FILES.crypto+= impacket/dcerpc/v5/rpcrt.py SUBST_FILES.crypto+= impacket/dcerpc/v5/samr.py SUBST_FILES.crypto+= impacket/dpapi.py SUBST_FILES.crypto+= impacket/dpapi_ng.py SUBST_FILES.crypto+= impacket/examples/ntlmrelayx/attacks/ldapattack.py SUBST_FILES.crypto+= impacket/examples/ntlmrelayx/clients/dcsyncclient.py SUBST_FILES.crypto+= impacket/examples/ntlmrelayx/utils/shadow_credentials.py SUBST_FILES.crypto+= impacket/examples/secretsdump.py SUBST_FILES.crypto+= impacket/krb5/crypto.py SUBST_FILES.crypto+= impacket/krb5/gssapi.py SUBST_FILES.crypto+= impacket/ntlm.py SUBST_FILES.crypto+= impacket/smb3.py SUBST_FILES.crypto+= tests/SMB_RPC/test_ntlm.py SUBST_FILES.crypto+= tests/dcerpc/test_mimilib.py SUBST_FILES.crypto+= tests/dcerpc/test_nrpc.py SUBST_FILES.crypto+= tests/dcerpc/test_samr.py SUBST_FILES.crypto+= tests/misc/test_dpapi.py SUBST_SED.crypto= -e 's,Cryptodome,Crypto,' post-install: .for bin in DumpNTLMInfo Get-GPPPassword GetADComputers GetADUsers GetLAPSPassword GetNPUsers \ GetUserSPNs addcomputer atexec changepasswd dacledit dcomexec describeTicket dpapi \ esentutl exchanger findDelegation getArch getPac getST getTGT \ goldenPac karmaSMB keylistattack kintercept lookupsid machine_role mimikatz mqtt_check \ mssqlclient mssqlinstance net netview nmapAnswerMachine ntfs-read ntlmrelayx owneredit \ ping ping6 \ psexec raiseChild rbcd rdp_check reg registry-read rpcdump rpcmap sambaPipe samrdump \ secretsdump services smbclient smbexec smbpasswd smbrelayx smbserver sniff sniffer \ split ticketConverter ticketer tstool wmiexec wmipersist wmiquery cd ${DESTDIR}${PREFIX}/bin && \ ${MV} ${bin}.py ${bin}-${PYVERSSUFFIX}.py || ${TRUE} .endfor .include "../../lang/python/wheel.mk" PYTHON_VERSIONED_DEPENDENCIES+= OpenSSL .include "../../lang/python/versioned_dependencies.mk" .include "../../mk/bsd.pkg.mk" @ 1.15 log @Fix PLIST after py-setuptools update; bump depends and revision @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2024/11/11 07:28:48 wiz Exp $ d3 1 a3 1 DISTNAME= impacket-0.12.0 a4 1 PKGREVISION= 1 @ 1.14 log @py-*: remove unused tool dependency py-setuptools includes the py-wheel functionality nowadays @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2024/09/18 09:13:09 adam Exp $ d5 1 d21 1 a21 1 DEPENDS+= ${PYPKGPREFIX}-setuptools-[0-9]*:../../devel/py-setuptools @ 1.13 log @py-impacket: updated to 0.12.0 Impacket v0.12.0-dev: 1. Library improvements * Fixed broken hRSetServiceObjectSecurity method (@@rkivys) * Removed dsinternals dependency (@@anadrianmanrique) * Fixed srvs.hNetrShareEnum returning erronous shares (@@cnotin) * Fixed lmhash computing to support non standard characters in the password (@@anadrianmanrique) * Assorted fixes when processing Unicode data (@@alexisbalbachan) * Added `[MS-GKDI]` Group Key Distribution Protocol implementation (@@zblurx) * Fixed incorrect padding in SMBSessionSetupAndX_Extended_ResponseData (@@rtpt-erikgeiser) * Upgraded dependency pyreadline -> pyreadline3 (@@anadrianmanrique) * SMB Server: * Added query information level 0x0109 for smb1 "SMB_QUERY_FILE_STREAM_INFO" (@@Adamkadaban) * Fixed filename encoding in queryPathInformation (@@JerAxxxxxxx) * Fixed NextEntryOffset for large directory listings (@@robnanola) * Fixed server returning an empty folder when cutting and pasting recursive directories (@@robnanola) * DHCP: Fixed encoding issues (@@ujwalkomarla) 3. Examples improvements * [secretsdump.py](examples/secretsdump.py): * Double DC Sync performance for DCs supporting SID lookups (@@tomspencer) * Added ability to skip dumping of SAM or SECURITY hives when performing remote operations (@@RazzburyPi) * Added ability to specify users to skip when dumping NTDS (@@RazzburyPi) * [ticketer.py](examples/ticketer.py): * Support to create Sapphire tickets (@@ShutdownRepo) * [GetUserSPNs.py](examples/GetUserSPNs.py), [getTGT.py](examples/getTGT.py): * Support for Kerberoasting without pre-authentication and ST request through AS-REQ (@@ShutdownRepo) * [wmiexec.py](examples/wmiexec.py): * Fix kerberos with remoteHost & add '-target-ip'(@@XiaoliChan) * [ntlmrelayx.py](examples/ntlmrelayx.py): * Added the creation of a new machine account through SMB (@@BlWasp) * NTLMRelayX Multirelay fixes for target handling, added --keep-relaying flag (@@alexisbalbachan) * Logging multirelay status when triggering the example (@@gabrielg5) * Write certificates to file rather than outputting b64 to console (@@RazzburyPi) * Improved ability to continue relaying to ADCS web enrollment endpoint in order to request multiple certificates for different users (@@RazzburyPi) * Fixed compatibility issue with other SMB clients connecting to the SOCKS proxy created by ntlmrelayx (@@jfjallid) * Allow configuration of the SOCKS5 address and port (@@rtpt-erikgeiser) * Fixed implementation of MSSQLShell (@@gabrielg5) * Logging notification of received connections in all relay servers (@@gabrielg5) * Add domain and username to interactive Ldap shell message (@@minniear) * Enhanced MSSQLShell in NTLMRelayX leveraging TcpShell & output messages (@@gabrielg5) * LDAP Attack: Bugfixes when parsing responses (@@SAERXCIT) * [getST.py](examples/getST.py): * Added -self, -altservice and -u2u for S4U2self abuse, S4U2self+u2u, and service substitution (@@ShutdownRepo) * Added ability to set the RENEW ticket option to renew a TGT (@@shikatano) * Fixed unicode encoding error when using the -impersonate flag (@@alexisbalbachan) * [getTGT.py](examples/getTGT.py): * Added principalType as new parameter (@@DevSpork) * [reg.py](examples/reg.py): * Start remote registry as unprivileged user in reg.py (@@dadevel) * Allow adding Binary values (@@dc3l1ne) * Add missing Null byte for REG_SZ values (@@PfiatDe) * Support for adding REG_MULTI_SZ values through (@@garbrielg5) * [smbclient.py](examples/smbclient.py): * Added ability to provide an output file that the smbclient mini shell will write commands and output to (@@RazzburyPi) * Fixed path parse issue when running `tree` command (@@trietend) * [smbserver.py](examples/smbserver.py): * Added parameter "-outputfile" to set smbserver log file(gabrielg5) * [DumpNTLMInfo.py](examples/DumpNTLMInfo.py): * Allow execution on non-default ports (@@jeffmcjunkin) * Fixed KeyError exception when running with a Windows 2003 target (@@XiaoliChan) * [findDelegation.py](examples/findDelegation.py): * Added new column to show if SPN exists (@@p0dalirius) * [mssqlclient.py](examples/mssqlclient.py): * Added `-target-ip` parameter to allow Kerberos authentication without much change in the DNS configuration of the local machine (@@Palkovsky) * [mssqlshell.py](examples/mssqlshell.py): * Switching back to original DB after running `enum_impersonate` command (@@exploide) * Fixed logging in printReplies showing error messages (@@gabrielg5) * [registry-read.py](examples/registry-read.py): * Fixed scenario where value name contains backlash (@@DidierA) * [net.py](examples/net.py): * Fixed User "Account Active" property value (@@marcobarlottini) * Fixed log messages printing variables in the wrong order (@@Cyb3rC3lt) * [rbcd.py](examples/rbcd.py): * Handled SID not found in LDAP error (@@ShutdownRepo) * [GetUserSPNs.py](examples/GetUserSPNs.py): * Updated the help information for -outputfile to be consistent with -save (@@scarvell) * [ntfs-read.py](examples/ntfs-read.py): * Minor refactor in ntfs-read.py to make it more human-readable (@@NtAlexio2) * [ldap_shell.py](examples/ldap_shell.py): * Added support for dirsync and whoami commands (@@nurfed1) * [lookupsid.py](examples/lookupsid.py): * Now supports kerberos auth (@@A1vinSmith) * [samrdump.py](examples/samrdump.py): * Will fetch AdminComment using MSRPC (@@joeldeleep) * [tstool.py](examples/tstool.py): * Added support for kerberos auth, resolves SIDs (@@nopernik) 4. New examples * [describeTicket.py](examples/describeTicket.py): Ticket describer and decrypter. (@@ShutdownRepo) * [GetADComputers.py](examples/GetADComputers.py): Query's DC via LDAP and returns the COMPUTER objects and the useful attributes such as full dns name, operating system name and version. (@@F-Masood) * [GetLAPSPassword.py](examples/GetLAPSPassword.py): Extract LAPS passwords from LDAP (@@zblurx and @@dru1d-foofus) * [dacledit.py](examples/dacledit.py): This script can be used to read, write, remove, backup, restore ACEs (Access Control Entries) in an object DACL (Discretionary Access Control List). (@@_nwodtuhs) (@@BlWasp_) (@@Wlayzz) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2024/02/29 20:56:48 adam Exp $ a12 1 TOOL_DEPENDS+= ${PYPKGPREFIX}-wheel-[0-9]*:../../devel/py-wheel @ 1.12 log @py-impacket: updated to 0.11.0 Impacket v0.11.0 (Aug 2023): 1. Library improvements * Added new Kerberos error codes (@@ly4k). * Added `[MS-TSTS]` Terminal Services Terminal Server Runtime Interface Protocol implementation (@@nopernik). * Changed the setting up for new SSL connections (@@mpgn, @@CT-H00K and @@0xdeaddood). * Added a callback function to smbserver for incoming authentications (@@p0dalirius). * Fix crash in winregistry (@@laxa) * Fixes in IDispatch derived classes in comev implementation (@@NtAlexio2) * Fix CVE-2020-17049 in ccache.py (@@godylockz) * Smbserver: Added SMB2_FILE_ALLOCATION_INFO type determination (@@JerAxxxxxxx) * tds: Fixed python3 incompatibility when receiving over TLS socket (@@exploide) * crypto: Ensure passwords are utf-8 encoded before deriving Kerberos keys (@@jojonas) * ese: Fixed python3 incompatibility when reading from db (@@alexisbalbachan) * ldap queries: Escaped characters are now correctly parsed (@@alexisbalbachan) * Support SASL authentication in ldap protocol (@@NtAlexio2) 2. Examples improvements * [GetADUsers.py](examples/GetADUsers.py), [GetNPUsers.py](examples/GetNPUsers.py), [GetUserSPNs.py](examples/GetUserSPNs.py) and [findDelegation.py](examples/findDelegation.py): * Added dc-host option to connect to specific KDC using its FQDN or NetBIOS name (@@rmaksimov and @@0xdeaddood). * [GetNPUsers.py](examples/GetNPUsers.py) * Printing TGT in stdout despite -outputfile parameter (@@alexisbalbachan and @@Zamanry) * Fixed output hash format for AES128/256 (etype 17/18) (@@erasmusc) * [GetUserSPNs.py](examples/GetUserSPNs.py): * Added LDAP paged search (@@ThePirateWhoSmellsOfSunflowers and @@SAERXCIT). * Added a -stealth flag to remove the SPN filter from the LDAP query (@@clavoillotte). * Improved searchFilter (@@ShutdownRepo) * Use LDAP paged search (@@ThePirateWhoSmellsOfSunflowers) * [psexec.py](examples/psexec.py): * Added support for name customization using a custom binary file (@@Dramelac). * [smbexec.py](examples/smbexec.py): * Security fixes for privilege escalation vulnerabilities (@@bugch3ck). * Fixed python3 compatibility issues, added workaround TCP over NetBIOS being disabled (@@ljrk0) * [secretsdump.py](examples/secretsdump.py): * Added a new option to extract only NTDS.DIT data for specific users based on an LDAP filter (@@snovvcrash). * Security fixes for privilege escalation vulnerabilities (@@bugch3ck). * [mssqlclient.py](examples/mssqlclient.py): * Added multiple new commands. Now supports xp_dirtree execution (@@Mayfly277, @@trietend and @@TurtleARM). * [ntlmrelayx.py](examples/ntlmrelayx.py): * Added ability to trigger SQLShell when running ntlmrelayx in interactive mode (@@sploutchy). * Added filter option to the socks command in ntlmrelayx CLI (@@shoxxdj) * Added ability to register DNS records through LDAP. * [addcomputer.py](examples/addcomputer.py), [rbcd.py](examples/rbcd.py): * Allow weak TLS ciphers for LDAP connections (@@AdrianVollmer) * [Get-GPPPassword.py](examples/Get-GPPPassword.py): * Better handling of various XML files in Group Policy Preferences (@@p0dalirius) * [smbclient.py](examples/smbclient.py): * Added recursive file listing (@@Sq00ky) * [ticketer.py](examples/ticketer.py): * Ticket duration is now specified in hours instead of days (@@Dramelac) * Added extra-pac implementation (@@Dramelac) 3. New examples * [net.py](examples/net.py) Implementation of windows net.exe builtin tool (@@NtAlexio2) * [changepasswd.py](examples/changepasswd.py) New example that allows password changing or reseting through multiple protocols (@@Alef-Burzmali, @@snovvcrash, @@bransh, @@api0cradle and @@p0dalirius) * [DumpNTLMInfo.py](examples/DumpNTLMInfo.py) New example that dumps remote host information in ntlm authentication model, without credentials. For SMB protocols v1, v2 and v3. (@@NtAlexio2) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2022/10/19 14:25:19 nia Exp $ d3 1 a3 1 DISTNAME= impacket-0.11.0 a12 1 TOOL_DEPENDS+= ${PYPKGPREFIX}-setuptools-[0-9]*:../../devel/py-setuptools d15 1 a17 1 DEPENDS+= ${PYPKGPREFIX}-dsinternals-[0-9]*:../../databases/py-dsinternals a18 1 DEPENDS+= ${PYPKGPREFIX}-future-[0-9]*:../../devel/py-future d21 1 a24 2 PYTHON_VERSIONS_INCOMPATIBLE= 27 d29 1 a33 1 SUBST_FILES.crypto+= examples/smbrelayx.py d40 1 d43 1 d57 3 a59 2 .for bin in DumpNTLMInfo Get-GPPPassword GetADUsers GetNPUsers GetUserSPNs addcomputer atexec \ changepasswd dcomexec dpapi esentutl exchanger findDelegation getArch getPac getST getTGT \ d61 2 a62 1 mssqlclient mssqlinstance net netview nmapAnswerMachine ntfs-read ntlmrelayx ping ping6 \ @ 1.11 log @fighting a losing battle against the py-cryptography rustification, part 5 Convert py-OpenSSL users to versioned_dependencies.mk @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2022/04/29 11:56:44 wiz Exp $ d3 1 a3 1 DISTNAME= impacket-0.9.24 a4 1 PKGREVISION= 2 d13 2 d16 1 a16 1 DEPENDS+= ${PYPKGPREFIX}-chardet-[0-9]*:../../converters/py-chardet d18 1 d26 1 a26 3 USE_PKG_RESOURCES= yes PYTHON_VERSIONS_INCOMPATIBLE= 27 # flask a49 2 SUBST_FILES.crypto+= tests/SMB_RPC/test_mimilib.py SUBST_FILES.crypto+= tests/SMB_RPC/test_nrpc.py d51 3 a53 1 SUBST_FILES.crypto+= tests/SMB_RPC/test_samr.py d58 7 a64 7 .for bin in Get-GPPPassword GetADUsers GetNPUsers GetUserSPNs PoC PoC2 addcomputer atexec dcomexec dpapi \ esentutl exchanger findDelegation getArch getPac getST getTGT goldenPac karmaSMB keylistattack2 \ kintercept lookupsid mimikatz mqtt_check mssqlclient mssqlinstance netview \ nmapAnswerMachine ntfs-read ntlmrelayx ping ping6 psexec raiseChild \ rbcd rdp_check reg registry-read rpcdump rpcmap sambaPipe samrdump secretsdump services \ smbclient smbexec smbpasswd smbrelayx smbserver sniff sniffer split testTGT testTGT2 ticketConverter \ ticketer wmiexec wmipersist wmiquery d69 1 a69 1 .include "../../lang/python/egg.mk" @ 1.10 log @*: mark py-flask dependencies as not-for-python-2.x I'll update py-flask soon; the current pkgsrc of py-flask version is broken and all newer versions do not support python 2.x @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 2022/01/05 15:41:16 wiz Exp $ a13 1 DEPENDS+= ${PYPKGPREFIX}-OpenSSL>=0.16.2:../../security/py-OpenSSL d70 2 @ 1.9 log @python: egg.mk: add USE_PKG_RESOURCES flag This flag should be set for packages that import pkg_resources and thus need setuptools after the build step. Set this flag for packages that need it and bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 2022/01/04 20:54:28 wiz Exp $ d27 1 a27 4 .include "../../lang/python/pyversion.mk" .if ${_PYTHON_VERSION} == 27 DEPENDS+= ${PYPKGPREFIX}-argparse-[0-9]*:../../devel/py-argparse .endif @ 1.8 log @*: bump PKGREVISION for egg.mk users They now have a tool dependency on py-setuptools instead of a DEPENDS @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2021/12/01 16:29:05 adam Exp $ d5 1 a5 1 PKGREVISION= 1 d25 2 @ 1.7 log @py-impacket: fix building @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2021/11/10 10:56:10 adam Exp $ d5 1 @ 1.6 log @py-impacket: updated to 0.9.24 Impacket v0.9.24 (October 2021): 1. Library improvements * Fixed WMI objects parsing * Added the RpcAddPrinterDriverEx method and related structures to [MS-RPRN]: Print System Remote Protocol * Initial implementation of [MS-PAR]: Print System Asynchronous Remote Protocol * Complying MS-RPCH with HTTP/1.1 * Added return of server time in case of Kerberos error 2. Examples improvements * [getST.py](examples/getST.py): * Added support for a custom additional ticket for S4U2Proxy * [ntlmrelayx.py](examples/ntlmrelayx.py): * Added Negotiate authentication support to the HTTP server * Added anonymous session handling in the HTTP server * Fixed error in ldapattack.py when trying to escalate with machine account * Added the implementation of AD CS attack * Disabled the anonymous logon in the SMB server * [psexec.py](examples/psexec.py): * Fixed decoding problems on multi bytes characters * [reg.py](examples/reg.py): * Implemented ADD and DELETE functionalities * [secretsdump.py](examples/secretsdump.py): * Speeding up NTDS parsing * [smbclient.py](examples/smbclient.py): * Added 'mget' command which allows the download of multiple files * Handling empty search count in FindFileBothDirectoryInfo * [smbpasswd.py](examples/smbpasswd.py): * Added the ability to change a user's password providing NTLM hashes * [smbserver.py](examples/smbserver.py): * Added NULL SMBv2 client connection handling * Hardened path checks and Added TID checks * Added SMB2 support to QUERY_INFO Request and Enabled SMB_COM_FLUSH method * Added missing constant and structure for the QUERY_FS Information Level SMB_QUERY_FS_DEVICE_INFO * [wmipersist.py](examples/wmipersist.py): * Fixed VBA script execution and improved error checking 3. New examples * [rbcd.py](examples/rbcd.py): Example script for handling the msDS-AllowedToActOnBehalfOfOtherIdentity property of a target computer @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2021/09/27 19:00:28 adam Exp $ d32 1 a32 1 SUBST_FILES.crypto+= examples/Get-GPPPassword.py.py @ 1.5 log @py-impacket: updated to 0.9.23 Impacket v0.9.23: Library improvements Support connect timeout with SMBTransport Speeding up DcSync Fixed Python3 issue when serving SOCKS5 requests Moved docker container to Python 3.8 Added basic GitHub Actions workflow Fixed Path Traversal vulnerabilities in smbserver.py - CVE-2021-31800 Fixed POST request processing in httprelayserver.py Added cat command to smbclient.py Added new features to the LDAP Interactive Shell to facilitate AD exploitation Python 3.9 support Examples improvements addcomputer.py: Enable the machine account created via SAMR getST.py: Added exploit for CVE-2020-17049 - Kerberos Bronze Bit attack Compute NTHash and AESKey for the Bronze Bit attack automatically ntlmrelayx.py: Fixed target parsing error wmipersist.py: Fixed filterBinding error Added PowerShell option for semi-interactive shells in dcomexec.py, smbexec.py and wmiexec.py Added new parameter to select COMVERSION in dcomexec.py, wmiexec.py, wmipersist.py and wmiquery.py New examples Get-GPPPassword.py: This example extracts and decrypts Group Policy Preferences passwords using streams for treating files instead of mounting shares. Additionally, it can parse GPP XML files offline smbpasswd.py: This script is an alternative to smbpasswd tool and intended to be used for changing expired passwords remotely over SMB (MSRPC-SAMR) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2021/01/20 09:08:46 adam Exp $ d3 1 a3 1 DISTNAME= impacket-0.9.23 d13 1 a13 1 DEPENDS+= ${PYPKGPREFIX}-OpenSSL>=0.13.1:../../security/py-OpenSSL d15 1 d18 2 a19 1 DEPENDS+= ${PYPKGPREFIX}-ldap3>=2.6:../../databases/py-ldap3 a22 1 TEST_DEPENDS+= ${PYPKGPREFIX}-future-[0-9]*:../../devel/py-future d32 1 d45 1 d59 2 a60 2 .for bin in A Get-GPPPassword GetADUsers GetNPUsers GetUserSPNs PoC PoC2 addcomputer atexec dcomexec dpapi \ esentutl exchanger findDelegation getArch getPac getST getTGT goldenPac karmaSMB \ d63 1 a63 1 rdp_check reg registry-read rpcdump rpcmap sambaPipe samrdump secretsdump services \ @ 1.4 log @py-impacket: updated to 0.9.22 ChangeLog for 0.9.22: Library improvements Added implementation of RPC over HTTP v2 protocol (by @@mohemiv). Added MS-NSPI, MS-OXNSPI and MS-OXABREF protocol implementations (by @@mohemiv). Improved the multi-page results in LDAP queries (by @@ThePirateWhoSmellsOfSunflowers). NDR parser optimization (by @@mohemiv). Improved serialization of WMI method parameters (by @@tshmul). Introduce the MS-NLMP 2.2.2.10 VERSION structure in NTLMAuthNegotiate messages (by @@franferrax). Added some NETLOGON structs for NetrServerPasswordSet2 (by @@dirkjanm). Python 3.8 support. Examples improvements atexec.py: Fixed after MS patches related to RPC attacks (by @@mohemiv). dpapi.py: Added -no-pass, pass-the-hash and AES Key support for backup subcommand. GetNPUsers.py: Added ability to enumerate targets with Kerberos KRB5CC (by @@rmaksimov). GetUserSPNs.py: Added new features for kerberoasting (by @@mohemiv). ntlmrelayx.py: Added ability to relay on new Windows versions that have SMB guest access disabled by default. Added option to specify the NTLM Server Challenge used when receiving a connection. Added relaying to RPC support (by @@mohemiv). Implemented WCFRelayServer (by @@cnotin). Added Zerologon DCSync Relay Client (by @@dirkjanm). Fixed issue in ldapattack.py when relaying and creating computer in CN=Computers (by @@Hackndo). rpcdump.py: Added RPC over HTTP v2 support (by @@mohemiv). secretsdump.py: Added ability to specifically delete a shadow based on its ID (by @@phefley). Dump plaintext machine account password when dumping the local registry secrets(by @@dirkjanm). New examples exchanger.py: A tool for connecting to MS Exchange via RPC over HTTP v2 (by @@mohemiv). rpcmap.py: Scan for listening DCE/RPC interfaces (by @@mohemiv). @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2020/05/26 22:30:50 adam Exp $ d3 1 a3 1 DISTNAME= impacket-0.9.22 d56 1 a56 1 .for bin in GetADUsers GetNPUsers GetUserSPNs addcomputer atexec dcomexec dpapi \ d60 2 a61 2 rdp_check reg registry-read rpcdump sambaPipe samrdump secretsdump services \ smbclient smbexec smbrelayx smbserver sniff sniffer split ticketConverter \ @ 1.3 log @py-impacket: fix DEPENDS; fix PLIST; fix binaries with Python version suffix; bump revision @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2020/04/30 14:53:00 nikita Exp $ d3 1 a3 2 DISTNAME= impacket-0.9.21 PKGREVISION= 2 d57 1 a57 1 esentutl findDelegation getArch getPac getST getTGT goldenPac ifmap karmaSMB \ d59 1 a59 1 nmapAnswerMachine ntfs-read ntlmrelayx opdump ping ping6 psexec raiseChild \ @ 1.2 log @py-impacket: use ALTERNATIVES @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1 2020/04/30 12:17:33 nikita Exp $ d4 1 a4 1 PKGREVISION= 1 a12 1 USE_TOOLS+= basename d14 6 a19 3 DEPENDS+= ${PYPKGPREFIX}-asn1-[0-9]*:../../security/py-asn1 DEPENDS+= ${PYPKGPREFIX}-cryptodomex-[0-9]*:../../security/py-cryptodomex DEPENDS+= ${PYPKGPREFIX}-OpenSSL-[0-9]*:../../security/py-OpenSSL d21 2 a22 3 DEPENDS+= ${PYPKGPREFIX}-ldap3-[0-9]*:../../databases/py-ldap3 DEPENDS+= ${PYPKGPREFIX}-flask-[0-9]*:../../www/py-flask DEPENDS+= ${PYPKGPREFIX}-ldapdomaindump-[0-9]*:../../net/py-ldapdomaindump d24 31 a54 3 # \todo: tests want ldap3==2.5.1, we have 2.7.x TEST_DEPENDS+= ${PYPKGPREFIX}-future-[0-9]*:../../devel/py-future TEST_DEPENDS+= ${PYPKGPREFIX}-coverage-[0-9]*:../../devel/py-coverage d57 7 d65 2 a66 5 set -e; \ for i in ${DESTDIR}${PREFIX}/bin/*; do \ n=`basename "$$i" ".py"`; \ ${MV} "$$i" "$$n"-${PYVERSSUFFIX}.py; \ done a67 1 .include "../../lang/python/application.mk" @ 1.1 log @py-impacket: Import from wip (packaged by wiz, updated by nikita) Impacket is a collection of Python classes for working with network protocols. Impacket is mostly focused on providing low-level programmatic access to the packets, however some protocols (for instance NMB and SMB) are implemented in a higher level as a foundation for other protocols. Packets can be constructed from scratch, as well as parsed from raw data, and the object oriented API makes it simple to work with deep hierarchies of protocols. Impacket is most useful when used together with a packet capture utility or package such as Pcapy, an object oriented Python extension for capturing network packets. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1 2014/01/02 21:18:09 thomasklausner Exp $ d4 1 d6 1 a6 1 CATEGORIES= devel python d13 1 d27 8 @