ezhangle / kekeo

A little toolbox to play with Microsoft Kerberos in C

kekeo

kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C (and for fun)

ASN.1 library

In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C (http://www.oss.com/asn1/products/asn1-c/asn1-c.html)
It was the only code generator/library that I've found to work easily with Microsoft C project.

• works without a lots of dependencies;
• magical documentation;
• wonderful support for my stupid questions;
• had a binary that work only few hours after started my project...

They were kind enough to offer me a 1-year licence.
With this one, I'm able to let you download binaries that run in your environment.
So don't forget to thank them ( http://www.oss.com/company/contact-us.html / https://twitter.com/OSSNokalva )

Limitations

• Binaries will work until March 16, 2016 (yeah, 1 year licence ;));
• You must buy a licence from OSS ASN.1/C (or download a trial version) to build kekeo solution/adapt it.
  • http://www.oss.com/asn1/products/asn1-c/asn1-c.html
  • When you register for a free trial, don't forget to refer me in the description field ;) (kekeo or gentilkiwi)

Building kekeo with ASN.1/C

You can't build kekeo out-of-the-box, you'have to generate C files and link with OSS libraries.

After downloading a commercial/trial version of OSS ASN.1/C:

1. Open ($kekeo)\modules\kull_m_kerberos_asn1.a1sproj in ASN.1 Studio, and generate files with Project/Compile (or F7) * It will create ($kekeo)\modules\kull_m_kerberos_asn1.c and ($kekeo)\modules\kull_m_kerberos_asn1.h
2. Copy from OSS ASN.1/C install dir (eg: C:\Program Files (x86)\OSS Nokalva\ossasn1\win32\10.1.0\) * include\ossasn1.h to ($kekeo)\inc\ * include\osstype.h to ($kekeo)\inc\ * lib\toedcode.libto ($kekeo)\lib\ * lib\ossiphlp.libto ($kekeo)\lib\

You can now build the kekeo solution in Visual Studio

Licence

CC BY-NC-SA 4.0 licence - https://creativecommons.org/licenses/by-nc-sa/4.0/

Acknowledgements

• Tom Maddock - Qualcomm - @ubernerdom - MS14-068 - https://www.qualcomm.com/
• Sylvain Monné - Solucom - @BiDOrD - Author of PyKek - https://github.com/bidord/pykek
• Tal Be'ery - Aorato / Microsoft - @TalBeerySec - http://www.aorato.com/blog/active-directory-vulnerability-disclosure-weak-encryption-enables-attacker-change-victims-password-without-logged/
• Grace Sigona - OSS - @OSSNokalva - http://www.oss.com/
• Taylor Swift - @SwiftOnSecurity - https://twitter.com/SwiftOnSecurity/status/767788634904735745
• Seth Moore - Microsoft - @robododo - https://datatracker.ietf.org/doc/draft-ietf-kitten-pkinit-freshness/
• Alberto Solino - Core Security / Impacket - @agsolino - https://github.com/CoreSecurity/impacket
• Laurent Gaffié - @PythonResponder / @lgandx - https://github.com/lgandx/Responder / https://g-laurent.blogspot.com/

Author

Benjamin DELPY gentilkiwi, you can contact me on Twitter ( @gentilkiwi ) or by mail ( benjamin [at] gentilkiwi.com )

This is a personal development, please respect its philosophy and don't use it for bad things!