Function krb_as_req

scapy/layers/kerberos.py:4199–4274

r""" Kerberos AS-Req :param upn: the user principal name formatted as "DOMAIN\user", "DOMAIN/user" or "user@DOMAIN" :param spn: (optional) the full service principal name. Defaults to "krbtgt/ " :param ip: the KDC ip. (optional. If not provided,

(
    upn: str,
    spn: Optional[str] = None,
    ip: Optional[str] = None,
    key: Optional["Key"] = None,
    password: Optional[str] = None,
    realm: Optional[str] = None,
    host: str = "WIN10",
    p12: Optional[str] = None,
    x509: Optional[Union[str, Cert]] = None,
    x509key: Optional[Union[str, PrivKey]] = None,
    **kwargs,
)

def krb_as_req(
    upn: str,
    spn: Optional[str] = None,
    ip: Optional[str] = None,
    key: Optional["Key"] = None,
    password: Optional[str] = None,
    realm: Optional[str] = None,
    host: str = "WIN10",
    p12: Optional[str] = None,
    x509: Optional[Union[str, Cert]] = None,
    x509key: Optional[Union[str, PrivKey]] = None,
    **kwargs,
):
    r"""
    Kerberos AS-Req

    :param upn: the user principal name formatted as "DOMAIN\user", "DOMAIN/user"
                or "user@DOMAIN"
    :param spn: (optional) the full service principal name.
                Defaults to "krbtgt/<realm>"
    :param ip: the KDC ip. (optional. If not provided, Scapy will query the DNS for
               _kerberos._tcp.dc._msdcs.domain.local).
    :param key: (optional) pass the Key object.
    :param password: (optional) otherwise, pass the user&#x27;s password
    :param x509: (optional) pass a x509 certificate for PKINIT.
    :param x509key: (optional) pass the private key of the x509 certificate for PKINIT.
    :param p12: (optional) use a pfx/p12 instead of x509 and x509key. In this case,
        'password' is the password of the p12.
    :param realm: (optional) the realm to use. Otherwise use the one from UPN.
    :param host: (optional) the host performing the AS-Req. WIN10 by default.

    :return: returns a named tuple (asrep=<...>, sessionkey=<...>)

    Example::

        >>> # The KDC is found via DC Locator, we ask a TGT for user1
        >>> krb_as_req("user1@DOMAIN.LOCAL", password="Password1")

    Equivalent::

        >>> from scapy.libs.rfc3961 import Key, EncryptionType
        >>> key = Key(EncryptionType.AES256_CTS_HMAC_SHA1_96, key=hex_bytes("6d0748c546
        ...: f4e99205e78f8da7681d4ec5520ae4815543720c2a647c1ae814c9"))
        >>> krb_as_req("user1@DOMAIN.LOCAL", ip="192.168.122.17", key=key)

    Example using PKINIT with a p12::

        >>> krb_as_req("user1@DOMAIN.LOCAL", p12="./store.p12", password="password")
    """
    if realm is None:
        _, realm = _parse_upn(upn)
    if key is None and p12 is None and x509 is None:
        if password is None:
            try:
                from prompt_toolkit import prompt

                password = prompt("Enter password: ", is_password=True)
            except ImportError: