Skip to content

Commit 5915554

Browse files
committed
doc: add FAST documentation
1 parent d14731c commit 5915554

File tree

1 file changed

+19
-2
lines changed

1 file changed

+19
-2
lines changed

doc/scapy/layers/kerberos.rst

Lines changed: 19 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,11 +41,11 @@ This section tries to give many usage examples, but isn't exhaustive. For more d
4141
>>> t.show()
4242
Tickets:
4343
0. Administrator@DOMAIN.LOCAL -> krbtgt/DOMAIN.LOCAL@DOMAIN.LOCAL
44-
Start time End time Renew until Auth time
44+
Start time End time Renew until Auth time
4545
31/08/23 11:38:34 31/08/23 21:38:34 31/08/23 21:38:35 31/08/23 01:38:34
4646
4747
1. Administrator@DOMAIN.LOCAL -> host/dc1.domain.local@DOMAIN.LOCAL
48-
Start time End time Renew until Auth time
48+
Start time End time Renew until Auth time
4949
31/08/23 11:39:07 31/08/23 21:38:34 31/08/23 21:38:35 31/08/23 01:38:34
5050
5151
@@ -80,12 +80,29 @@ This section tries to give many usage examples, but isn't exhaustive. For more d
8080
>>> # One could also have used a different cert and key file:
8181
>>> t.request_tgt("Administrator@DOMAIN.LOCAL", x509="admin.cert", x509key="admin.key", ca="ca.pem")
8282
83+
- **Request a user TGT with Kerberos armoring (FAST)**
84+
85+
The ``armor_with`` keyword allows to select a ticket to armor the request with.
86+
87+
.. code:: pycon
88+
89+
>>> load_module("ticketer")
90+
>>> t = Ticketer()
91+
>>> t.request_tgt("Machine01$@DOMAIN.LOCAL", key=Key(EncryptionType.RC4_HMAC, bytes.fromhex("2b576acbe6bcfda7294d6bd18041b8fe")))
92+
>>> t.show()
93+
Tickets:
94+
0. Machine01$@DOMAIN.LOCAL -> krbtgt/DOMAIN.LOCAL@DOMAIN.LOCAL
95+
Start time End time Renew until Auth time
96+
31/08/23 11:38:34 31/08/23 21:38:34 31/08/23 21:38:35 31/08/23 01:38:34
97+
>>> t.request_tgt("Administrator@domain.local", armor_with=0) # Armor with ticket n°0
98+
8399
- **Renew a TGT or ST**:
84100

85101
.. code::
86102
87103
>>> t.renew(0) # renew TGT
88104
>>> t.renew(1) # renew ST. Works only with 'host/' SPNs
105+
>>> t.renew(1, armor_with=0) # renew something with armoring
89106
90107
- **Import tickets from a ccache**:
91108

0 commit comments

Comments
 (0)