#FEWS PYTHON LIBRARY CODE#

Grabs credentials from ccache file (KRB5CCNAME) based on target parameters. k, –kerberos Use Kerberos authentication. u USER, –user USER Username to authenticate with ts, –timestamps Display timestamps for each log h, –help show this help message and exit Targets Targets in CIDR, hostname and IP formats are accepted, from a file or not Masky also provides options that are commonly provided by such tools (thread number, authentication mode, targets loaded from files, etc. Its execution allows to collect NT hashes, CCACHE and PFX of 3 distincts domain users from the sec.lab testing domain. The following demo shows a basic usage of Masky by targeting 4 remote systems. Therefore, do not forget to manually reset the original value in case of such unwanted stop. Despite the automated roll-back of its intial ImagePath value, an unexpected error during Masky runtime could skip the cleanup phase. Warning: Masky deploys an executable on each target via a modification of the existing RasAuto service.

Make sure that the default User template is enabled on the targeted CA. This information can be easily retrieved via the certipy find option or via the Microsoft built-in c ertutil.exe tool. Moreover, a command line interface was created on top of it to ease its usage during pentest or RedTeam activities.įor both usages, you need first to retrieve the FQDN of a CA server and its CA name deployed via an ADCS. Masky has been designed as a Python library.

#FEWS PYTHON LIBRARY CODE#

Moreover, if you need to modify the agent, the C# code can be recompiled via a Visual Studio project located in agent/Masky.sln. The Masky agent executable is already included within the PyPi package. Masky python3 library and its associated CLI can be simply installed via the public PyPi repository as following:

Fews python library