Method import_krb

scapy/modules/ticketer.py:665–724

Import the result of krb_[tgs/as]_req or a Ticket into the CCache. :param obj: a KRB_Ticket object or a AS_REP/TGS_REP object :param sessionkey: the session key that comes along the ticket

(self, res, key=None, hash=None, _inplace=None)

        del self.ccache.credentials[i]

    def import_krb(self, res, key=None, hash=None, _inplace=None):
        """
        Import the result of krb_[tgs/as]_req or a Ticket into the CCache.

        :param obj: a KRB_Ticket object or a AS_REP/TGS_REP object
        :param sessionkey: the session key that comes along the ticket
        """
        # Instantiate CCCredential
        if _inplace is not None:
            cred = self.ccache.credentials[_inplace]
        else:
            cred = CCCredential()

        # Update the cred
        if isinstance(res, KRB_Ticket):
            if key is None:
                key = self._prompt_hash(
                    res.getSPN(),
                    etype=res.encPart.etype.val,
                    hash=hash,
                )
            decTkt = res.encPart.decrypt(key)
            cred.set_from_krb(
                res,
                decTkt,
                decTkt.key.toKey(),
                decTkt,
            )
        else:
            if isinstance(res, KerberosClient.RES_AS_MODE):
                rep = res.asrep
            elif isinstance(res, KerberosClient.RES_TGS_MODE):
                rep = res.tgsrep

                # There could be 171 = KERB_DMSA_KEY_PACKAGE to import
                for padata in res.kdcrep.encryptedPaData:
                    if padata.padataType == 171:
                        # We have keys to import.
                        key_package = padata.padataValue
                        for key in key_package.currentKeys:
                            self.add_cred(
                                principal=rep.getUPN(),
                                key=key.toKey(),
                            )
                        log_interactive.info(
                            "%s DMSA keys found and imported !"
                            % len(key_package.currentKeys)
                        )
            else:
                raise ValueError("Unknown type of obj !")
            cred.set_from_krb(
                rep.ticket,
                rep,
                res.sessionkey,
                res.kdcrep,
            )

        # Append to ccache