Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Kerberos hash didn't extracted in some cases #90

Closed
odedshimon opened this issue Apr 19, 2021 · 2 comments · Fixed by #91
Closed

Kerberos hash didn't extracted in some cases #90

odedshimon opened this issue Apr 19, 2021 · 2 comments · Fixed by #91
Assignees
@odedshimon
Labels
bug Something isn't working help wanted Extra attention is needed

Comments

@odedshimon
Copy link
Owner

The attached file contains Kerberos hashes, but for some reason it is not extracted.
From an initial inspection, it seems that the Kerberos payload is not a valid ASN1 serialized data.

hideandseek.zip
@odedshimon odedshimon added bug Something isn't working help wanted Extra attention is needed labels Apr 19, 2021
@odedshimon odedshimon self-assigned this Apr 25, 2021
@odedshimon
Copy link
Owner Author

That reason for this issue seems to be a lack of consideration in the field "Record Mark" when parsing Kerberos over TCP packets.
I have started working on it on that branch: https://github.com/odedshimon/BruteShark/tree/improve-kerberos-parsing

@odedshimon odedshimon mentioned this issue May 1, 2021
Merged
3 tasks
@odedshimon odedshimon linked a pull request May 1, 2021 that will close this issue
Improve kerberos parsing #91
Merged
3 tasks
@odedshimon
Copy link
Owner Author

Fixed. Since version 1.2.2 it is working also with Kerberos over TCP with "Record Mark" field.

@odedshimon odedshimon mentioned this issue May 1, 2021
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@odedshimon odedshimon

Labels
bug Something isn't working help wanted Extra attention is needed
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Improve kerberos parsing odedshimon/BruteShark
1 participant
@odedshimon