fortra / impacket

Impacket is a collection of Python classes for working with network protocols.
https://www.coresecurity.com
Other
13.06k stars 3.49k forks source link

[GetUserSPNs.py] improvement for the salt for AES hashes #1773

Open trietend opened 2 weeks ago

trietend commented 2 weeks ago

Improvement to use UPN instead of sAMAccountName for the salt of AES hashes. Only implemented for the query of all accounts, not for userfiles and single users.

The correct but noisy way would be to use the salt as described in https://github.com/fortra/impacket/issues/1772, but this is better then the implementation before. Not sure what to prefer here