Kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C (and for fun)
In kekeo
, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C (http://www.oss.com/asn1/products/asn1-c/asn1-c.html)
It was the only code generator/library that I’ve found to work easily with Microsoft C project.
They were kind enough to offer me a 1-year licence.
With this one, I’m able to let you download binaries that run in your environment.
So don’t forget to thank them ( http://www.oss.com/company/contact-us.html / https://twitter.com/OSSNokalva )
kekeo
solution/adapt it.kekeo
or gentilkiwi
)You can’t build kekeo
out-of-the-box, you’have to generate C files and link with OSS libraries.
After downloading and installing a commercial/trial version of OSS ASN.1/C, Win32
and/or x64
:
($kekeo)\modules\asn1
ASN1C
variable to your ASN.1/C configuration (architecture & version)set ASN1C=”C:\Program Files\OSS Nokalva\ossasn1\winx64\10.4.0″
Win32
%ASN1C%\bin\asn1.exe ^
%ASN1C%\asn1dflt\asn1dflt.ms.zp4 ^
KerberosV5Spec2.asn KerberosV5-PK-INIT-SPEC.asn PKIX1Explicit88.asn PKINIT.asn MS-SFU-KILE.asn ^
-noSampleCode -der -root -CStyleComments -externalName kekeo_asn1 -messageFormat msvc -verbose ^
-headerFile kull_m_kerberos_oss_asn1_internal.h -soedFile kull_m_kerberos_oss_asn1_internal_Win32.c
x64
%ASN1C%\bin\asn1.exe ^
%ASN1C%\asn1dflt\asn1dflt.msx64.zp8 ^
KerberosV5Spec2.asn KerberosV5-PK-INIT-SPEC.asn PKIX1Explicit88.asn PKINIT.asn MS-SFU-KILE.asn ^
-noSampleCode -der -root -CStyleComments -externalName kekeo_asn1 -messageFormat msvc -verbose ^
-headerFile kull_m_kerberos_oss_asn1_internal.h -soedFile kull_m_kerberos_oss_asn1_internal_x64.c
Header file kull_m_kerberos_oss_asn1_internal.h
is the same for both architecture.
C:\Program Files\OSS Nokalva\ossasn1\winx64\10.4.0
)include\ossasn1.h
to ($kekeo)\inc
include\osstype.h
to ($kekeo)\inc
lib\soeddefa.lib
to ($kekeo)\lib\{Win32 or x64}
lib\ossiphlp.lib
to ($kekeo)\lib\{Win32 or x64}
You can now build the kekeo
solution in Visual Studio
shadow-rs is a Windows kernel rootkit written in Rust, demonstrating advanced techniques for kernel manipulation…
Extract and execute a PE embedded within a PNG file using an LNK file. The…
Embark on the journey of becoming a certified Red Team professional with our definitive guide.…
This repository contains proof of concept exploits for CVE-2024-5836 and CVE-2024-6778, which are vulnerabilities within…
This took me like 4 days (+2 days for an update), but I got it…
MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection. Its foundation is…