scapy.layers.kerberos¶

Kerberos V5

Implements parts of:

Kerberos Network Authentication Service (V5): RFC4120
Kerberos Version 5 GSS-API: RFC1964, RFC4121
Kerberos Pre-Authentication: RFC6113 (FAST)

You will find more complete documentation for this layer over Kerberos

Example decryption:

>>> from scapy.libs.rfc3961 import Key, EncryptionType
>>> pkt = Ether(hex_bytes("525400695813525400216c2b08004500015da71840008006dc\
83c0a87a9cc0a87a11c209005854f6ab2392c25bd650182014b6e00000000001316a8201\
2d30820129a103020105a20302010aa3633061304ca103020102a24504433041a0030201\
12a23a043848484decb01c9b62a1cabfbc3f2d1ed85aa5e093ba8358a8cea34d4393af93\
bf211e274fa58e814878db9f0d7a28d94e7327660db4f3704b3011a10402020080a20904\
073005a0030101ffa481b73081b4a00703050040810010a1123010a003020101a1093007\
1b0577696e3124a20e1b0c444f4d41494e2e4c4f43414ca321301fa003020102a1183016\
1b066b72627467741b0c444f4d41494e2e4c4f43414ca511180f32303337303931333032\
343830355aa611180f32303337303931333032343830355aa7060204701cc5d1a8153013\
0201120201110201170201180202ff79020103a91d301b3019a003020114a11204105749\
4e31202020202020202020202020"))
>>> enc = pkt[Kerberos].root.padata[0].padataValue
>>> k = Key(enc.etype.val, key=hex_bytes("7fada4e566ae4fb270e2800a23a\
e87127a819d42e69b5e22de0ddc63da80096d"))
>>> enc.decrypt(k)

scapy.layers.kerberos.ADMANDATORYFORKDC[source]¶: alias of AuthorizationData

class scapy.layers.kerberos.AD_AND_OR(_pkt, /, *, conditionCount=0x0 <ASN1_INTEGER[0]>, elements=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_PACKET object>)>¶

aliastypes¶

fields_desc¶

AD_AND_OR fields¶
conditionCount	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
elements	`ASN1F_PACKET`	`None`

scapy.layers.kerberos.AD_IF_RELEVANT[source]¶: alias of AuthorizationData

class scapy.layers.kerberos.AD_KDCIssued(_pkt, /, *, checksumtype=0x0 <ASN1_INTEGER[0]>, checksum=<ASN1_STRING['']>, iRealm=<ASN1_GENERAL_STRING['']>, iSname=None, elements=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_STRING object>)>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_PACKET object>)>¶

aliastypes¶

fields_desc¶

AD_KDCIssued fields¶
checksumtype	`ASN1F_enum_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
checksum	`ASN1F_STRING`	`<ASN1_STRING['']>`
iRealm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
iSname	`ASN1F_PACKET`	`None`
elements	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.ASN1F_KRB_APPLICATION(*seq: Any, **kwargs: Any)[source]¶

Bases: ASN1F_SEQUENCE

ASN1_tag = <ASN1Tag APPLICATION[96]>¶

default: _A | None¶

class scapy.layers.kerberos.ASN1_Class_KRB[source]¶

Bases: ASN1_Class_UNIVERSAL

ANY = <ASN1Tag ANY[0]>¶

APPLICATION = <ASN1Tag APPLICATION[96]>¶

BIT_STRING = <ASN1Tag BIT_STRING[3]>¶

BMP_STRING = <ASN1Tag BMP_STRING[30]>¶

BOOLEAN = <ASN1Tag BOOLEAN[1]>¶

CHAR_STRING = <ASN1Tag CHAR_STRING[29]>¶

COUNTER32 = <ASN1Tag COUNTER32[65]>¶

EMBEDDED_PDF = <ASN1Tag EMBEDDED_PDF[11]>¶

ENUMERATED = <ASN1Tag ENUMERATED[10]>¶

ERROR = <ASN1Tag ERROR[-3]>¶

EXTERNAL = <ASN1Tag EXTERNAL[8]>¶

GAUGE32 = <ASN1Tag GAUGE32[66]>¶

GENERALIZED_TIME = <ASN1Tag GENERALIZED_TIME[24]>¶

GENERAL_STRING = <ASN1Tag GENERAL_STRING[27]>¶

GRAPHIC_STRING = <ASN1Tag GRAPHIC_STRING[25]>¶

IA5_STRING = <ASN1Tag IA5_STRING[22]>¶

INTEGER = <ASN1Tag INTEGER[2]>¶

IPADDRESS = <ASN1Tag IPADDRESS[64]>¶

ISO646_STRING = <ASN1Tag ISO646_STRING[26]>¶

NONE = <ASN1Tag NONE[-1]>¶

NULL = <ASN1Tag NULL[5]>¶

NUMERIC_STRING = <ASN1Tag NUMERIC_STRING[18]>¶

OBJECT_DESCRIPTOR = <ASN1Tag OBJECT_DESCRIPTOR[7]>¶

OID = <ASN1Tag OID[6]>¶

PRINTABLE_STRING = <ASN1Tag PRINTABLE_STRING[19]>¶

RAW = <ASN1Tag RAW[-2]>¶

REAL = <ASN1Tag REAL[9]>¶

RELATIVE_OID = <ASN1Tag RELATIVE_OID[13]>¶

SEQUENCE = <ASN1Tag SEQUENCE[48]>¶

SET = <ASN1Tag SET[49]>¶

STRING = <ASN1Tag STRING[4]>¶

T61_STRING = <ASN1Tag T61_STRING[20]>¶

TIME_TICKS = <ASN1Tag TIME_TICKS[67]>¶

UNIVERSAL_STRING = <ASN1Tag UNIVERSAL_STRING[28]>¶

UTC_TIME = <ASN1Tag UTC_TIME[23]>¶

UTF8_STRING = <ASN1Tag UTF8_STRING[12]>¶

VIDEOTEX_STRING = <ASN1Tag VIDEOTEX_STRING[21]>¶

name = 'KERBEROS'¶

class scapy.layers.kerberos.ASN1_GSSAPI_APPLICATION(val: _K)[source]¶

Bases: ASN1_SEQUENCE

tag = <ASN1Tag APPLICATION[96]>¶

class scapy.layers.kerberos.AuthorizationData(_pkt, /, *, seq=[<AuthorizationDataItem |>])[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE_OF seq>¶

aliastypes¶

fields_desc¶

AuthorizationData fields¶
seq	`ASN1F_SEQUENCE_OF`	`[<AuthorizationDataItem \|>]`

class scapy.layers.kerberos.AuthorizationDataItem(_pkt, /, *, adType=0x0 <ASN1_INTEGER[0]>, adData=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.layers.kerberos._AuthorizationData_value_Field object>)>¶

aliastypes¶

fields_desc¶

AuthorizationDataItem fields¶
adType	`ASN1F_enum_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
adData	`_AuthorizationData_value_Field`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.BERcodec_GSSAPI_APPLICATION[source]¶

Bases: BERcodec_SEQUENCE

tag = <ASN1Tag APPLICATION[96]>¶

scapy.layers.kerberos.Checksum(**kwargs)[source]¶

class scapy.layers.kerberos.DHRepInfo(_pkt, /, *, dhSignedData=<ASN1_STRING['']>, serverDHNonce=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_STRING object>, <scapy.asn1fields.ASN1F_optional object>)>¶

aliastypes¶

fields_desc¶

DHRepInfo fields¶
dhSignedData	`ASN1F_STRING`	`<ASN1_STRING['']>`
serverDHNonce	`ASN1F_STRING`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.ETYPE_INFO(_pkt, /, *, seq=[<ETYPE_INFO_ENTRY |>])[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE_OF seq>¶

aliastypes¶

fields_desc¶

ETYPE_INFO fields¶
seq	`ASN1F_SEQUENCE_OF`	`[<ETYPE_INFO_ENTRY \|>]`

class scapy.layers.kerberos.ETYPE_INFO2(_pkt, /, *, seq=[<ETYPE_INFO_ENTRY2 |>])[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE_OF seq>¶

aliastypes¶

fields_desc¶

ETYPE_INFO2 fields¶
seq	`ASN1F_SEQUENCE_OF`	`[<ETYPE_INFO_ENTRY2 \|>]`

class scapy.layers.kerberos.ETYPE_INFO_ENTRY(_pkt, /, *, etype=0x1 <ASN1_INTEGER[1]>, salt=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>)>¶

aliastypes¶

fields_desc¶

ETYPE_INFO_ENTRY fields¶
etype	`ASN1F_enum_INTEGER`	`0x1 <ASN1_INTEGER[1]>`
salt	`ASN1F_STRING`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.ETYPE_INFO_ENTRY2(_pkt, /, *, etype=0x1 <ASN1_INTEGER[1]>, salt=<ASN1_GENERAL_STRING['']>, s2kparams=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>)>¶

aliastypes¶

fields_desc¶

ETYPE_INFO_ENTRY2 fields¶
etype	`ASN1F_enum_INTEGER`	`0x1 <ASN1_INTEGER[1]>`
salt	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
s2kparams	`ASN1F_STRING`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.EncASRepPart(_pkt, /, *, key=None, lastReq=[], nonce=0x0 <ASN1_INTEGER[0]>, keyExpiration=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, flags=0, authtime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, starttime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, endtime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, renewTill=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, srealm=<ASN1_GENERAL_STRING['']>, sname=<PrincipalName |>, caddr=[], encryptedPaData=[])[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_PACKET object>, <ASN1F_SEQUENCE_OF lastReq>, <scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_FLAGS object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERAL_STRING object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_optional object>, <ASN1F_SEQUENCE_OF encryptedPaData>)>,)>¶

aliastypes¶

fields_desc¶

EncASRepPart fields¶
key	`ASN1F_PACKET`	`None`
lastReq	`ASN1F_SEQUENCE_OF`	`[]`
nonce	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
keyExpiration	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
flags	`ASN1F_FLAGS`	`0`
authtime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
starttime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
endtime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
renewTill	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
srealm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
sname	`ASN1F_PACKET`	`<PrincipalName \|>`
caddr	`ASN1F_SEQUENCE_OF`	`[]`
encryptedPaData	`ASN1F_SEQUENCE_OF`	`[]`

class scapy.layers.kerberos.EncKeyPack(_pkt, /, *, encKeyPack=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <scapy.asn1fields.ASN1F_STRING object>¶

aliastypes¶

fields_desc¶

EncKeyPack fields¶
encKeyPack	`ASN1F_STRING`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.EncTGSRepPart(_pkt, /, *, key=None, lastReq=[], nonce=0x0 <ASN1_INTEGER[0]>, keyExpiration=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, flags=0, authtime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, starttime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, endtime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, renewTill=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, srealm=<ASN1_GENERAL_STRING['']>, sname=<PrincipalName |>, caddr=[], encryptedPaData=[])[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_PACKET object>, <ASN1F_SEQUENCE_OF lastReq>, <scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_FLAGS object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERAL_STRING object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_optional object>, <ASN1F_SEQUENCE_OF encryptedPaData>)>,)>¶

aliastypes¶

fields_desc¶

EncTGSRepPart fields¶
key	`ASN1F_PACKET`	`None`
lastReq	`ASN1F_SEQUENCE_OF`	`[]`
nonce	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
keyExpiration	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
flags	`ASN1F_FLAGS`	`0`
authtime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
starttime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
endtime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
renewTill	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
srealm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
sname	`ASN1F_PACKET`	`<PrincipalName \|>`
caddr	`ASN1F_SEQUENCE_OF`	`[]`
encryptedPaData	`ASN1F_SEQUENCE_OF`	`[]`

class scapy.layers.kerberos.EncTicketPart(_pkt, /, *, flags=0, key=None, crealm=<ASN1_GENERAL_STRING['']>, cname=None, transited=<TransitedEncoding |>, authtime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, starttime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, endtime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, renewTill=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, addresses=[], authorizationData=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_FLAGS object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_GENERAL_STRING object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>)>,)>¶

aliastypes¶

fields_desc¶

EncTicketPart fields¶
flags	`ASN1F_FLAGS`	`0`
key	`ASN1F_PACKET`	`None`
crealm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
cname	`ASN1F_PACKET`	`None`
transited	`ASN1F_PACKET`	`<TransitedEncoding \|>`
authtime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
starttime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
endtime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
renewTill	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
addresses	`ASN1F_SEQUENCE_OF`	`[]`
authorizationData	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.EncryptedData(_pkt, /, *, etype=0x1 <ASN1_INTEGER[1]>, kvno=0x0 <ASN1_INTEGER[0]>, cipher=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_STRING object>)>¶

aliastypes¶

decrypt(key, key_usage_number=None, cls=None)[source]¶

Decrypt and return the data contained in cipher.

Parameters:

key – the key to use for decryption
key_usage_number – (optional) specify the key usage number. Guessed otherwise
cls – (optional) the class of the decrypted payload Guessed otherwise (or bytes)

encrypt(key, text, confounder=None, key_usage_number=None)[source]¶

Encrypt text and set it into cipher.

Parameters:

key – the key to use for encryption
text – the bytes value to encode
confounder – (optional) specify the confounder bytes. Random otherwise
key_usage_number – (optional) specify the key usage number. Guessed otherwise

fields_desc¶

EncryptedData fields¶
etype	`ASN1F_enum_INTEGER`	`0x1 <ASN1_INTEGER[1]>`
kvno	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
cipher	`ASN1F_STRING`	`<ASN1_STRING['']>`

get_usage()[source]¶: Get current key usage number and encrypted class

class scapy.layers.kerberos.EncryptionKey(_pkt, /, *, keytype=0x0 <ASN1_INTEGER[0]>, keyvalue=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_STRING object>)>¶

aliastypes¶

fields_desc¶

EncryptionKey fields¶
keytype	`ASN1F_enum_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
keyvalue	`ASN1F_STRING`	`<ASN1_STRING['']>`

toKey()[source]¶

class scapy.layers.kerberos.ExternalPrincipalIdentifier(_pkt, /, *, subjectName=<ASN1_STRING['']>, issuerAndSerialNumber=<ASN1_STRING['']>, subjectKeyIdentifier=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>)>¶

aliastypes¶

fields_desc¶

ExternalPrincipalIdentifier fields¶
subjectName	`ASN1F_STRING`	`<ASN1_STRING['']>`
issuerAndSerialNumber	`ASN1F_STRING`	`<ASN1_STRING['']>`
subjectKeyIdentifier	`ASN1F_STRING`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.HostAddress(_pkt, /, *, addrType=0x0 <ASN1_INTEGER[0]>, address=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_STRING object>)>¶

aliastypes¶

fields_desc¶

HostAddress fields¶
addrType	`ASN1F_enum_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
address	`ASN1F_STRING`	`<ASN1_STRING['']>`

scapy.layers.kerberos.HostAddresses(name, **kwargs)[source]¶

class scapy.layers.kerberos.KRB5_GSS(_pkt, /)[source]¶

Bases: Packet

aliastypes¶

classmethod dispatch_hook(_pkt=None, *args, **kargs)[source]¶

class scapy.layers.kerberos.KRB5_GSS_Delete_sec_context_RFC1964(_pkt, /, *, TOK_ID=b'\x01\x02', SGN_ALG=0, reserved=4294967295, SND_SEQ=b'', SGN_CKSUM=b'')[source]¶

Bases: Packet

aliastypes¶

fields_desc¶

Display RFC-like schema

 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|             TOK ID            |            SGN ALG            |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                            RESERVED                           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                            SND SEQ                            |
+                                                               +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                           SGN CKSUM                           |
+                                                               +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

             Fig. KRB5_GSS_Delete_sec_context_RFC1964

KRB5_GSS_Delete_sec_context_RFC1964 fields¶
TOK_ID	`StrFixedLenEnumField`	`b'\x01\x02'`
SGN_ALG	`LEShortEnumField`	`0`
reserved	`LEIntField`	`4294967295`
SND_SEQ	`XStrFixedLenField`	`b''`
SGN_CKSUM	`PadField`	`b''`

class scapy.layers.kerberos.KRB5_GSS_GetMIC(_pkt, /, *, TOK_ID=b'\x04\x04', Flags=<Flag 8 (?)>, reserved=4294967295, SND_SEQ=b'', SGN_CKSUM=b'')[source]¶

Bases: Packet

aliastypes¶

fields_desc¶

Display RFC-like schema

 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|             TOK ID            |FLAG|            RESERVED           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                               |            SND SEQ            |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               +
|                                                               |
+                               +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                               |           SGN CKSUM           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               +
|                                                               |
+                               +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

                       Fig. KRB5_GSS_GetMIC

KRB5_GSS_GetMIC fields¶
TOK_ID	`StrFixedLenEnumField`	`b'\x04\x04'`
Flags	`FlagsField`	`<Flag 8 (?)>`
reserved	`LEIntField`	`4294967295`
SND_SEQ	`XStrFixedLenField`	`b''`
SGN_CKSUM	`PadField`	`b''`

class scapy.layers.kerberos.KRB5_GSS_GetMIC_RFC1964(_pkt, /, *, TOK_ID=b'\x01\x01', SGN_ALG=0, reserved=4294967295, SND_SEQ=b'', SGN_CKSUM=b'')[source]¶

Bases: Packet

aliastypes¶

fields_desc¶

Display RFC-like schema

 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|             TOK ID            |            SGN ALG            |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                            RESERVED                           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                            SND SEQ                            |
+                                                               +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                           SGN CKSUM                           |
+                                                               +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

                   Fig. KRB5_GSS_GetMIC_RFC1964

KRB5_GSS_GetMIC_RFC1964 fields¶
TOK_ID	`StrFixedLenEnumField`	`b'\x01\x01'`
SGN_ALG	`LEShortEnumField`	`0`
reserved	`LEIntField`	`4294967295`
SND_SEQ	`XStrFixedLenField`	`b''`
SGN_CKSUM	`PadField`	`b''`

payload_guess¶: Possible sublayers: Kerberos

class scapy.layers.kerberos.KRB5_GSS_Wrap(_pkt, /, *, TOK_ID=b'\x05\x04', Flags=<Flag 8 (?)>, reserved=255, EC=0, RRC=0, SND_SEQ=b'', SGN_CKSUM=b'')[source]¶

Bases: Packet

aliastypes¶

fields_desc¶

Display RFC-like schema

 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|             TOK ID            |FLAG|    RESERVED   |       EC      |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|               |              RRC              |    SND SEQ    |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+               +
|                                                               |
+                                               +-+-+-+-+-+-+-+-+
|                                               |   SGN CKSUM   |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+               +
|                                                               |
+                                               +-+-+-+-+-+-+-+-+
|                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

                        Fig. KRB5_GSS_Wrap

KRB5_GSS_Wrap fields¶
TOK_ID	`StrFixedLenEnumField`	`b'\x05\x04'`
Flags	`FlagsField`	`<Flag 8 (?)>`
reserved	`ByteField`	`255`
EC	`ShortField`	`0`
RRC	`ShortField`	`0`
SND_SEQ	`XStrFixedLenField`	`b''`
SGN_CKSUM	`PadField`	`b''`

class scapy.layers.kerberos.KRB5_GSS_Wrap_RFC1964(_pkt, /, *, TOK_ID=b'\x02\x01', SGN_ALG=0, SEAL_ALG=0, reserved=65535, SND_SEQ=b'', SGN_CKSUM=b'', CONFOUNDER=b'')[source]¶

Bases: Packet

aliastypes¶

fields_desc¶

Display RFC-like schema

 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|             TOK ID            |            SGN ALG            |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|            SEAL ALG           |            RESERVED           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                            SND SEQ                            |
+                                                               +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                           SGN CKSUM                           |
+                                                               +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                           CONFOUNDER                          |
+                                                               +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

                    Fig. KRB5_GSS_Wrap_RFC1964

KRB5_GSS_Wrap_RFC1964 fields¶
TOK_ID	`StrFixedLenEnumField`	`b'\x02\x01'`
SGN_ALG	`LEShortEnumField`	`0`
SEAL_ALG	`LEShortEnumField`	`0`
reserved	`LEShortField`	`65535`
SND_SEQ	`XStrFixedLenField`	`b''`
SGN_CKSUM	`PadField`	`b''`
CONFOUNDER	`XStrFixedLenField`	`b''`

payload_guess¶: Possible sublayers: Kerberos

class scapy.layers.kerberos.KRB5_InitialContextToken_innerContextToken(_pkt, /, *, TOK_ID=b'\x01\x01')[source]¶

Bases: Packet

aliastypes¶

fields_desc¶

Display RFC-like schema

 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|             TOK ID            |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

         Fig. KRB5_InitialContextToken_innerContextToken

KRB5_InitialContextToken_innerContextToken fields¶
TOK_ID	`StrFixedLenEnumField`	`b'\x01\x01'`

payload_guess¶: Possible sublayers: Kerberos

class scapy.layers.kerberos.KRB_AP_REP(_pkt, /, *, pvno=0x5 <ASN1_INTEGER[5]>, msgType=0xf <ASN1_INTEGER[15]>, encPart=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_PACKET object>)>,)>¶

aliastypes¶

fields_desc¶

KRB_AP_REP fields¶
pvno	`ASN1F_INTEGER`	`0x5 <ASN1_INTEGER[5]>`
msgType	`ASN1F_enum_INTEGER`	`0xf <ASN1_INTEGER[15]>`
encPart	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.KRB_AP_REQ(_pkt, /, *, pvno=0x5 <ASN1_INTEGER[5]>, msgType=0xe <ASN1_INTEGER[14]>, apOptions=<ASN1_BIT_STRING[]=b'' (0 unused bit)>, ticket=None, authenticator=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_FLAGS object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_PACKET object>)>,)>¶

aliastypes¶

fields_desc¶

KRB_AP_REQ fields¶
pvno	`ASN1F_INTEGER`	`0x5 <ASN1_INTEGER[5]>`
msgType	`ASN1F_enum_INTEGER`	`0xe <ASN1_INTEGER[14]>`
apOptions	`ASN1F_FLAGS`	`<ASN1_BIT_STRING[]=b'' (0 unused bit)>`
ticket	`ASN1F_PACKET`	`None`
authenticator	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.KRB_AS_REP(_pkt, /, *, pvno=0x5 <ASN1_INTEGER[5]>, msgType=0xb <ASN1_INTEGER[11]>, padata=[], crealm=<ASN1_GENERAL_STRING['']>, cname=None, ticket=None, encPart=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERAL_STRING object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_PACKET object>)>,)>¶

aliastypes¶

fields_desc¶

KRB_AS_REP fields¶
pvno	`ASN1F_INTEGER`	`0x5 <ASN1_INTEGER[5]>`
msgType	`ASN1F_enum_INTEGER`	`0xb <ASN1_INTEGER[11]>`
padata	`ASN1F_SEQUENCE_OF`	`[]`
crealm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
cname	`ASN1F_PACKET`	`None`
ticket	`ASN1F_PACKET`	`None`
encPart	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.KRB_AS_REQ(_pkt, /, *, pvno=0x5 <ASN1_INTEGER[5]>, msgType=0xa <ASN1_INTEGER[10]>, padata=[], reqBody=<KRB_KDC_REQ_BODY |>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_PACKET object>)>,)>¶

aliastypes¶

fields_desc¶

KRB_AS_REQ fields¶
pvno	`ASN1F_INTEGER`	`0x5 <ASN1_INTEGER[5]>`
msgType	`ASN1F_enum_INTEGER`	`0xa <ASN1_INTEGER[10]>`
padata	`ASN1F_SEQUENCE_OF`	`[]`
reqBody	`ASN1F_PACKET`	`<KRB_KDC_REQ_BODY \|>`

class scapy.layers.kerberos.KRB_Authenticator(_pkt, /, *, authenticatorPvno=0x5 <ASN1_INTEGER[5]>, crealm=<ASN1_GENERAL_STRING['']>, cname=None, checksumtype=0x0 <ASN1_INTEGER[0]>, checksum=<ASN1_STRING['']>, cusec=0x0 <ASN1_INTEGER[0]>, ctime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, subkey=None, seqNumber=0x0 <ASN1_INTEGER[0]>, encAuthorizationData=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_GENERAL_STRING object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>)>,)>¶

aliastypes¶

fields_desc¶

KRB_Authenticator fields¶
authenticatorPvno	`ASN1F_INTEGER`	`0x5 <ASN1_INTEGER[5]>`
crealm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
cname	`ASN1F_PACKET`	`None`
checksumtype	`ASN1F_enum_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
checksum	`ASN1F_STRING`	`<ASN1_STRING['']>`
cusec	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
ctime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
subkey	`ASN1F_PACKET`	`None`
seqNumber	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
encAuthorizationData	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.KRB_ERROR(_pkt, /, *, pvno=0x5 <ASN1_INTEGER[5]>, msgType=0x1e <ASN1_INTEGER[30]>, ctime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, cusec=0x0 <ASN1_INTEGER[0]>, stime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, susec=0x0 <ASN1_INTEGER[0]>, errorCode=0x0 <ASN1_INTEGER[0]>, crealm=<ASN1_GENERAL_STRING['']>, cname=None, realm=<ASN1_GENERAL_STRING['']>, sname=None, eText=<ASN1_GENERAL_STRING['']>, eData=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERAL_STRING object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>)>,)>¶

aliastypes¶

fields_desc¶

KRB_ERROR fields¶
pvno	`ASN1F_INTEGER`	`0x5 <ASN1_INTEGER[5]>`
msgType	`ASN1F_enum_INTEGER`	`0x1e <ASN1_INTEGER[30]>`
ctime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
cusec	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
stime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
susec	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
errorCode	`ASN1F_enum_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
crealm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
cname	`ASN1F_PACKET`	`None`
realm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
sname	`ASN1F_PACKET`	`None`
eText	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
eData	`_KRBERROR_data_Field`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.KRB_InitialContextToken(_pkt, /, *, MechType=<ASN1_OID['Kerberos 5']>, innerContextToken=<KRB5_InitialContextToken_innerContextToken |>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<scapy.asn1fields.ASN1F_OID object>, <scapy.asn1fields.ASN1F_PACKET object>)>¶

aliastypes¶

fields_desc¶

KRB_InitialContextToken fields¶
MechType	`ASN1F_OID`	`<ASN1_OID['Kerberos 5']>`
innerContextToken	`ASN1F_PACKET`	`<KRB5_InitialContextToken_innerContextToken \|>`

class scapy.layers.kerberos.KRB_KDC_REQ_BODY(_pkt, /, *, kdcOptions=<ASN1_BIT_STRING[]=b'' (0 unused bit)>, cname=None, realm=<ASN1_GENERAL_STRING['']>, sname=None, from_=None, till=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, rtime=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, nonce=0x0 <ASN1_INTEGER[0]>, etype=[], addresses=[], encAuthorizationData=None, additionalTickets=[])[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_FLAGS object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERAL_STRING object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_INTEGER object>, <ASN1F_SEQUENCE_OF etype>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>)>¶

aliastypes¶

fields_desc¶

KRB_KDC_REQ_BODY fields¶
kdcOptions	`ASN1F_FLAGS`	`<ASN1_BIT_STRING[]=b'' (0 unused bit)>`
cname	`ASN1F_PACKET`	`None`
realm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
sname	`ASN1F_PACKET`	`None`
from_	`ASN1F_GENERALIZED_TIME`	`None`
till	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
rtime	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
nonce	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
etype	`ASN1F_SEQUENCE_OF`	`[]`
addresses	`ASN1F_SEQUENCE_OF`	`[]`
encAuthorizationData	`ASN1F_PACKET`	`None`
additionalTickets	`ASN1F_SEQUENCE_OF`	`[]`

class scapy.layers.kerberos.KRB_TGS_REP(_pkt, /, *, pvno=0x5 <ASN1_INTEGER[5]>, msgType=0xb <ASN1_INTEGER[11]>, padata=[], crealm=<ASN1_GENERAL_STRING['']>, cname=None, ticket=None, encPart=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_GENERAL_STRING object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_PACKET object>)>,)>¶

aliastypes¶

fields_desc¶

KRB_TGS_REP fields¶
pvno	`ASN1F_INTEGER`	`0x5 <ASN1_INTEGER[5]>`
msgType	`ASN1F_enum_INTEGER`	`0xb <ASN1_INTEGER[11]>`
padata	`ASN1F_SEQUENCE_OF`	`[]`
crealm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
cname	`ASN1F_PACKET`	`None`
ticket	`ASN1F_PACKET`	`None`
encPart	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.KRB_TGS_REQ(_pkt, /, *, pvno=0x5 <ASN1_INTEGER[5]>, msgType=0xa <ASN1_INTEGER[10]>, padata=[], reqBody=<KRB_KDC_REQ_BODY |>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_PACKET object>)>,)>¶

aliastypes¶

fields_desc¶

KRB_TGS_REQ fields¶
pvno	`ASN1F_INTEGER`	`0x5 <ASN1_INTEGER[5]>`
msgType	`ASN1F_enum_INTEGER`	`0xa <ASN1_INTEGER[10]>`
padata	`ASN1F_SEQUENCE_OF`	`[]`
reqBody	`ASN1F_PACKET`	`<KRB_KDC_REQ_BODY \|>`

class scapy.layers.kerberos.KRB_Ticket(_pkt, /, *, tktVno=0x0 <ASN1_INTEGER[0]>, realm=<ASN1_GENERAL_STRING['']>, sname=None, encPart=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_KRB_APPLICATION(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_GENERAL_STRING object>, <scapy.asn1fields.ASN1F_PACKET object>, <scapy.asn1fields.ASN1F_PACKET object>)>,)>¶

aliastypes¶

fields_desc¶

KRB_Ticket fields¶
tktVno	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
realm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
sname	`ASN1F_PACKET`	`None`
encPart	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.Kerberos(_pkt, /, *, root=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <scapy.asn1fields.ASN1F_CHOICE object>¶

aliastypes¶

fields_desc¶

Kerberos fields¶
root	`ASN1F_CHOICE`	`None`

mysummary()[source]¶

class scapy.layers.kerberos.KerberosClient(self, debug: int = 0, store: int = 1, **kargs: Any)[source]¶

Bases: Automaton

BEGIN(*args: ATMT, **kargs: Any) → NewStateRequested[source]¶

FINAL(*args: ATMT, **kargs: Any) → NewStateRequested[source]¶

RES[source]¶: alias of AS_Result

SENT_AP_REQ(*args: ATMT, **kargs: Any) → NewStateRequested[source]¶

actions: Dict[str, List[_StateWrapper]] = {'receive_ap_rep': [<function KerberosClient.decrypt_ap_rep>], 'receive_krb_error_ap_req': [], 'should_send_ap_req': [<function KerberosClient.send_ap_req>]}¶

ap_req()[source]¶

breakpoints: Set[_StateWrapper]¶

conditions: Dict[str, List[_StateWrapper]] = {'BEGIN': [<function KerberosClient.should_send_ap_req>], 'FINAL': [], 'SENT_AP_REQ': []}¶

decrypt_ap_rep(pkt)[source]¶

initial_states: List[_StateWrapper] = [<function ATMT.state.<locals>.deco.<locals>._state_wrapper>]¶

intercepted_packet: None | Packet¶

interception_points: Set[_StateWrapper]¶

ioevents: Dict[str, List[_StateWrapper]] = {'BEGIN': [], 'FINAL': [], 'SENT_AP_REQ': []}¶

ionames: List[str] = []¶

iosupersockets: List[SuperSocket] = []¶

packets: PacketList¶

receive_ap_rep(pkt)[source]¶

receive_krb_error_ap_req(pkt)[source]¶

recv_conditions: Dict[str, List[_StateWrapper]] = {'BEGIN': [], 'FINAL': [], 'SENT_AP_REQ': [<function KerberosClient.receive_krb_error_ap_req>, <function KerberosClient.receive_ap_rep>]}¶

send(pkt)[source]¶

send_ap_req()[source]¶

should_send_ap_req()[source]¶

states: Dict[str, _StateWrapper] = {'BEGIN': <function ATMT.state.<locals>.deco.<locals>._state_wrapper>, 'FINAL': <function ATMT.state.<locals>.deco.<locals>._state_wrapper>, 'SENT_AP_REQ': <function ATMT.state.<locals>.deco.<locals>._state_wrapper>}¶

stop_states: List[_StateWrapper] = []¶

threadid: int | None¶

timeout: Dict[str, _TimerList] = {'BEGIN': [], 'FINAL': [], 'SENT_AP_REQ': []}¶

class scapy.layers.kerberos.KerberosTCPHeader(_pkt, /, *, len=None)[source]¶

Bases: Packet

aliastypes¶

fields_desc¶

Display RFC-like schema

 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                              LEN                              |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

                      Fig. KerberosTCPHeader

KerberosTCPHeader fields¶
len	`LenField`	`None`

payload_guess¶: Possible sublayers: Kerberos

classmethod tcp_reassemble(data, *args, **kwargs)[source]¶

class scapy.layers.kerberos.KrbFastArmor(_pkt, /, *, armorType=0x1 <ASN1_INTEGER[1]>, armorValue=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.layers.kerberos._KrbFastArmor_value_Field object>)>¶

aliastypes¶

fields_desc¶

KrbFastArmor fields¶
armorType	`ASN1F_enum_INTEGER`	`0x1 <ASN1_INTEGER[1]>`
armorValue	`_KrbFastArmor_value_Field`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.KrbFastArmoredRep(_pkt, /, *, encFastRep=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_PACKET object>,)>,)>¶

aliastypes¶

fields_desc¶

KrbFastArmoredRep fields¶
encFastRep	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.KrbFastArmoredReq(_pkt, /, *, armor=<KrbFastArmor |>, checksumtype=0x0 <ASN1_INTEGER[0]>, checksum=<ASN1_STRING['']>, encFastReq=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_optional object>, <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_STRING object>)>, <scapy.asn1fields.ASN1F_PACKET object>)>,)>¶

aliastypes¶

fields_desc¶

KrbFastArmoredReq fields¶
armor	`ASN1F_PACKET`	`<KrbFastArmor \|>`
checksumtype	`ASN1F_enum_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
checksum	`ASN1F_STRING`	`<ASN1_STRING['']>`
encFastReq	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.KrbFastFinished(_pkt, /, *, timestamp=0x0 <ASN1_INTEGER[0]>, usec=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, crealm=<ASN1_GENERAL_STRING['']>, cname=None, checksumtype=0x0 <ASN1_INTEGER[0]>, checksum=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_GENERAL_STRING object>, <scapy.asn1fields.ASN1F_PACKET object>, <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.asn1fields.ASN1F_STRING object>)>)>¶

aliastypes¶

fields_desc¶

KrbFastFinished fields¶
timestamp	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
usec	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
crealm	`ASN1F_GENERAL_STRING`	`<ASN1_GENERAL_STRING['']>`
cname	`ASN1F_PACKET`	`None`
checksumtype	`ASN1F_enum_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
checksum	`ASN1F_STRING`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.KrbFastReq(_pkt, /, *, fastOptions=<ASN1_BIT_STRING[]=b'' (0 unused bit)>, padata=[<PADATA |>], reqBody=None)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_FLAGS object>, <ASN1F_SEQUENCE_OF padata>, <scapy.asn1fields.ASN1F_PACKET object>)>¶

aliastypes¶

fields_desc¶

KrbFastReq fields¶
fastOptions	`ASN1F_FLAGS`	`<ASN1_BIT_STRING[]=b'' (0 unused bit)>`
padata	`ASN1F_SEQUENCE_OF`	`[<PADATA \|>]`
reqBody	`ASN1F_PACKET`	`None`

class scapy.layers.kerberos.KrbFastResponse(_pkt, /, *, padata=[<PADATA |>], stengthenKey=None, finished=<KrbFastFinished |>, nonce=0x0 <ASN1_INTEGER[0]>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<ASN1F_SEQUENCE_OF padata>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_INTEGER object>)>¶

aliastypes¶

fields_desc¶

KrbFastResponse fields¶
padata	`ASN1F_SEQUENCE_OF`	`[<PADATA \|>]`
stengthenKey	`ASN1F_PACKET`	`None`
finished	`ASN1F_PACKET`	`<KrbFastFinished \|>`
nonce	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`

class scapy.layers.kerberos.LastReqItem(_pkt, /, *, lrType=0x0 <ASN1_INTEGER[0]>, lrValue=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_GENERALIZED_TIME object>)>¶

aliastypes¶

fields_desc¶

LastReqItem fields¶
lrType	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
lrValue	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`

class scapy.layers.kerberos.MethodData(_pkt, /, *, seq=[<PADATA |>])[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE_OF seq>¶

aliastypes¶

fields_desc¶

MethodData fields¶
seq	`ASN1F_SEQUENCE_OF`	`[<PADATA \|>]`

class scapy.layers.kerberos.PADATA(_pkt, /, *, padataType=0x0 <ASN1_INTEGER[0]>, padataValue=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <scapy.layers.kerberos._PADATA_value_Field object>)>¶

aliastypes¶

fields_desc¶

PADATA fields¶
padataType	`ASN1F_enum_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
padataValue	`_PADATA_value_Field`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.PA_AUTHENTICATION_SET(_pkt, /, *, elems=[<PA_AUTHENTICATION_SET_ELEM |>])[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE_OF elems>¶

aliastypes¶

fields_desc¶

PA_AUTHENTICATION_SET fields¶
elems	`ASN1F_SEQUENCE_OF`	`[<PA_AUTHENTICATION_SET_ELEM \|>]`

class scapy.layers.kerberos.PA_AUTHENTICATION_SET_ELEM(_pkt, /, *, paType=0x0 <ASN1_INTEGER[0]>, paHint=<ASN1_STRING['']>, paValue=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>)>¶

aliastypes¶

fields_desc¶

PA_AUTHENTICATION_SET_ELEM fields¶
paType	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
paHint	`ASN1F_STRING`	`<ASN1_STRING['']>`
paValue	`ASN1F_STRING`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.PA_ENC_TS_ENC(_pkt, /, *, patimestamp=20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>, pausec=0x0 <ASN1_INTEGER[0]>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_GENERALIZED_TIME object>, <scapy.asn1fields.ASN1F_optional object>)>¶

aliastypes¶

fields_desc¶

PA_ENC_TS_ENC fields¶
patimestamp	`ASN1F_GENERALIZED_TIME`	`20230203222246Z [invalid generalized time] <ASN1_GENERALIZED_TIME[<GeneralizedTime>]>`
pausec	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`

class scapy.layers.kerberos.PA_FX_FAST_REPLY(_pkt, /, *, armoredData=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <scapy.asn1fields.ASN1F_CHOICE object>¶

aliastypes¶

fields_desc¶

PA_FX_FAST_REPLY fields¶
armoredData	`ASN1F_CHOICE`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.PA_FX_FAST_REQUEST(_pkt, /, *, armoredData=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <scapy.asn1fields.ASN1F_CHOICE object>¶

aliastypes¶

fields_desc¶

PA_FX_FAST_REQUEST fields¶
armoredData	`ASN1F_CHOICE`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.PA_PAC_OPTIONS(_pkt, /, *, options=0)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_FLAGS object>,)>¶

aliastypes¶

fields_desc¶

PA_PAC_OPTIONS fields¶
options	`ASN1F_FLAGS`	`0`

class scapy.layers.kerberos.PA_PAC_REQUEST(_pkt, /, *, includePac=True <ASN1_BOOLEAN[True]>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_BOOLEAN object>,)>¶

aliastypes¶

fields_desc¶

PA_PAC_REQUEST fields¶
includePac	`ASN1F_BOOLEAN`	`True <ASN1_BOOLEAN[True]>`

class scapy.layers.kerberos.PA_PK_AS_REP(_pkt, /, *, rep=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <scapy.asn1fields.ASN1F_CHOICE object>¶

aliastypes¶

fields_desc¶

PA_PK_AS_REP fields¶
rep	`ASN1F_CHOICE`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.PA_PK_AS_REQ(_pkt, /, *, signedAuthpack=<ASN1_STRING['']>, trustedCertifiers=[<ExternalPrincipalIdentifier |>], kdcPkId=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_STRING object>, <scapy.asn1fields.ASN1F_optional object>, <scapy.asn1fields.ASN1F_optional object>)>¶

aliastypes¶

fields_desc¶

PA_PK_AS_REQ fields¶
signedAuthpack	`ASN1F_STRING`	`<ASN1_STRING['']>`
trustedCertifiers	`ASN1F_SEQUENCE_OF`	`[<ExternalPrincipalIdentifier \|>]`
kdcPkId	`ASN1F_STRING`	`<ASN1_STRING['']>`

class scapy.layers.kerberos.PA_SUPPORTED_ENCTYPES(_pkt, /, *, flags=<Flag 0 ()>)[source]¶

Bases: Packet

aliastypes¶

fields_desc¶

Display RFC-like schema

 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                             FLAGS                             |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

                    Fig. PA_SUPPORTED_ENCTYPES

PA_SUPPORTED_ENCTYPES fields¶
flags	`FlagsField`	`<Flag 0 ()>`

class scapy.layers.kerberos.PrincipalName(_pkt, /, *, nameType=0x0 <ASN1_INTEGER[0]>, nameString=[])[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_enum_INTEGER object>, <ASN1F_SEQUENCE_OF nameString>)>¶

aliastypes¶

fields_desc¶

PrincipalName fields¶
nameType	`ASN1F_enum_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
nameString	`ASN1F_SEQUENCE_OF`	`[]`

class scapy.layers.kerberos.TransitedEncoding(_pkt, /, *, trType=0x0 <ASN1_INTEGER[0]>, contents=<ASN1_STRING['']>)[source]¶

Bases: ASN1_Packet

ASN1_codec = <ASN1Codec BER[1]>¶

ASN1_root = <ASN1F_SEQUENCE(<scapy.asn1fields.ASN1F_INTEGER object>, <scapy.asn1fields.ASN1F_STRING object>)>¶

aliastypes¶

fields_desc¶

TransitedEncoding fields¶
trType	`ASN1F_INTEGER`	`0x0 <ASN1_INTEGER[0]>`
contents	`ASN1F_STRING`	`<ASN1_STRING['']>`

scapy.layers.kerberos.krb_as_req(upn, ip, key=None, password=None, **kwargs)[source]¶

Kerberos AS-Req

Parameters:

upn – the user principal name formatted as “DOMAINuser” or “user@DOMAIN”
ip – the KDC ip
key – (optional) pass the Key object
password – (optional) otherwise, pass the user’s password

Returns:

returns a named tuple (asrep=<…>, sessionkey=<…>)

Example:

>>> # The KDC is on 192.168.122.17, we ask a TGT for user1
>>> krb_as_req("user1@DOMAIN.LOCAL", "192.168.122.17", password="Password1")

Equivalent:

>>> from scapy.libs.rfc3961 import Key, EncryptionType
>>> key = Key(EncryptionType.AES256, key=hex_bytes("6d0748c546f4e99205
...: e78f8da7681d4ec5520ae4815543720c2a647c1ae814c9"))
>>> krb_as_req("user1@DOMAIN.LOCAL", "192.168.122.17", key=key)