hCF<dZddlmZmZmZddlZddlZddlZddlZddlZddl m Z m Z m Z m Z mZddlmZmZddlmZddlmZddlmZmZmZmZmZmZmZmZmZm Z m!Z!dd l"m#Z#dd l$m%Z%dd l&m'Z'dd l(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z;dd lZ>m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEmFZFmGZGmHZHmIZImIZImJZJmKZKmLZLmMZMmNZNmOZOmPZPmQZQmRZRddlSmTZTmUZUddlVmWZWmXZXmYZY ddlZZ[ddl\m]Z^ddlZm_Z_n #e`$rdZ[YnwxYwGdde#ZaGdde#ZbGdde#ZcGdde#ZdGdde#ZeGdde#ZfGdde#ZgGdd e#ZhGd!d"e#Zie[Gd#d$e[jjZkGd%d&ZldS)'zj Create/Edit Kerberos ticket using Scapy See https://scapy.readthedocs.io/en/latest/layers/kerberos.html )datetime timedeltatimezoneN)ASN1_BIT_STRINGASN1_GENERAL_STRINGASN1_GENERALIZED_TIME ASN1_INTEGER ASN1_STRING) bytes_hex hex_bytes)conf)log_interactive) ByteField FieldLenField FlagsField IntEnumFieldIntField PacketFieldPacketListFieldShortEnumField ShortField StrLenField UTCTimeField)Packet) pretty_list)NDRUnion)AuthorizationDataAuthorizationDataItem EncTicketPart EncryptedData EncryptionKey KRB_TicketKerberosClient KerberosSSP PrincipalNameTransitedEncodingkpasswd krb_as_req krb_tgs_req _AD_TYPES _ADDR_TYPES _KRB_E_TYPES _KRB_S_TYPES_PRINCIPAL_NAME_TYPES _TICKET_FLAGS) CLAIM_ENTRY CLAIMS_ARRAY CLAIMS_SETCLAIMS_SET_METADATA CYPHER_BLOCKFILETIMEGROUP_MEMBERSHIPKERB_SID_AND_ATTRIBUTESKERB_VALIDATION_INFOPAC_ATTRIBUTES_INFOPAC_CLIENT_CLAIMS_INFOPAC_CLIENT_INFOPAC_INFO_BUFFERr< PAC_REQUESTORPAC_SIGNATURE_DATAPACTYPERPC_SID_IDENTIFIER_AUTHORITYRPC_UNICODE_STRINGSID UPN_DNS_INFOUSER_SESSION_KEYCLAIM_ENTRY_sub2) WINNT_SIDWINNT_SID_IDENTIFIER_AUTHORITY)EncryptionTypeKey _checksums)ttkcPeZdZeddddedddgZd ZdS) CCCountedOctetStringlengthNdataI) length_offmtc|jSN)rNpkts Z/mounts/lovelace/software/anaconda3/lib/python3.11/site-packages/scapy/modules/ticketer.pyzCCCountedOctetString.usrS length_fromctjSrUr padding_layerselfpayloads rXguess_payload_classz(CCCountedOctetString.guess_payload_classx !!rS)__name__ __module__ __qualname__rr fields_descrbrSrXrMrMrsX hC@@@ FC-C-CDDDK """""rSrMc eZdZeddeeddddedeeedged gZ d Z d Z dS) CCPrincipal name_typernum_componentsN componentsrPcount_ofrRrealmc|jSrU)rlrVs rXrYzCCPrincipal.s 3#5rS count_fromcdd|jDd|jjS)N/c3HK|]}|jVdSrU)rOdecode.0xs rX z#CCPrincipal.toPN..s,>>QV]]__>>>>>>rS@)joinrmrprOrwr`s rXtoPNzCCPrincipal.toPNsH HH>>do>>> > > > > JO " " $ $ $  rSctjSrUr]r_s rXrbzCCPrincipal.guess_payload_classrcrS) rdrerfrr.rrrMrrgrrbrhrSrXrjrj|s [!%:;; &|MMM G11335IJJ   55    K   """""rSrjcDeZdZeddeddgZdZdS) CCDeltaTime time_offsetr usec_offsetctjSrUr]r_s rXrbzCCDeltaTime.guess_payload_classrcrSN)rdrerfrrgrbrhrSrXrrsH""""K """""rSrcreZdZeddddieddedeegZdZdS) CCHeadertag DeltaTimetaglentagdatactjSrUr]r_s rXrbzCCHeader.guess_payload_classrcrSN) rdrerfrrrrrgrbrhrSrXrrsfua![!122 8Q I{{}}k::K """""rSrceZdZeddeeddedddeddd gZd Z d Z dS) CCKeyBlockkeytyperetypekeylenNkeyvalue)rQrSc|jSrU)rrVs rXrYzCCKeyBlock.sSZrSrZc8t|j|jS)N)key)rIrrr~s rXtoKeyzCCKeyBlock.toKeys4ssrSrr num_authdatarc|jSrU)rrVs rXrYzCCCredential.s s?OrSticket second_ticketctjSrUr]r_s rXrbz CCCredential.guess_payload_classrcrSct||j_|jjj|j_t|j j|j_ d|jj D|j_ |j jj|j _t|jj|j _ d|j j D|j _ t|j|j|_|jj|_|j#|jj|_|jj|_|jjddkr#|jj|_t7|jjd|_dS)NrOc8g|]}t|jSrrMvalrxs rX z-CCCredential.set_from_krb..3" " " 12 ae , , ," " " rSc8g|]}t|jSrrrxs rXrz-CCCredential.set_from_krb..rrSrrr1)bytesrrOsnamenameTyperrrkrMrp nameStringrmcnamercrealmrrrrrr timestamprrflags renewTillrintr)r`tkt clientpart sessionkeykdcreps rX set_from_krbzCCCredential.set_from_krbs :: !$ 2 6 0cimDDD " " 69i6J" " "   !+ 0 9 = 0j6G6KLLL " " 6@6F6Q" " "   #$^    0::<<   '#-6@@BBDN~.88:: < A # % %$.7AACCDO  0!44rS)rdrerfrrjrrrrr/lenrrrrrMrgrbrrhrSrXrrs Hkkmm[99 Hkkmm[99 J j99 Z&& [$'' Y%% \4(( )Q   bTR##m*<*<%<= =ttt D     mTGEEEY;V;VWWW ndZSIII J3O3O     H22446JKK O%9%9%;%;=QRR/K4""" 5 5 5 5 5rSrc eZdZeddeddedgededeeed gegZ d S) CCachefile_format_versioni headerlenrheadersc|jSrU)rrVs rXrYzCCache.srSrZprimary_principal credentialsN) rdrerfrrrrrjrrgrhrSrXrr sw (&11 ;"" 2x=V=VWWW ' DD r<88 KKKrSrc<eZdZfdZdZdZdZdZdZxZ S) ScrollFramec>t|tj|d|_t j|j|_tj|d|jj |_ |j |j j |j dd|j d d d |jd |jdd|_|jd|j|jd|j|jd|j|jd|j|ddS)Nr) borderwidthverticalorientcommandyscrollcommandrightysidefillleftbothTrrexpand)rnwz self.viewPort)windowanchortagsz zz)super__init__tkCanvascanvasrKFrameviewPort Scrollbaryviewvsb configuresetpack create_window canvas_windowbindonFrameConfigureonCanvasConfigureonEnteronLeave)r`parent __class__s rXrzScrollFrame.__init__sc GG  V $ $ $)Da888DKIdk22DM|DT[EVWWWDH K ! ! ! > > > HMMwSM 1 1 1 K  &vd  C C C!%!:!:t}T";""D  M  }d.C D D D K  ]D,B C C C M  y$, 7 7 7 M  y$, 7 7 7  ! !$ ' ' ' ' 'rScl|j|jddS)z4Reset the scroll region to encompass the inner frameall) scrollregionN)rrbboxr`events rXrzScrollFrame.onFrameConfigure3s1 K ! !t{/?/?/F/F ! G G G G GrScV|j}|j|j|dS)z>Reset the canvas window to encompass inner frame when required)widthN)rr itemconfigr)r`r canvas_widths rXrzScrollFrame.onCanvasConfigure7s- ;L K " "4#5\ " J J J J JrSctjdkr5|jt d|jdz zddStjdkr2|jt d|jzddS|jdkr|jdddS|jdkr|jdddSdS) NWindowsrxunitsDarwinrr)platformsystemr yview_scrollrdeltanumrs rX onMouseWheelzScrollFrame.onMouseWheel<s  I-- ((R5;3D-E)F)FPPPPP""h.. ((R%+-=)>)>HHHHH9>>K,,R99999Y!^^K,,Q88888$^rSctjdkrB|jd|j|jd|jdS|jd|jdSNLinuxz z z )rrrbind_allr!rs rXrzScrollFrame.onEnterGsr  G++ $$\43DEEE $$\43DEEEEE $$^T5FGGGGGrSctjdkr6|jd|jddS|jddSr#)rrr unbind_allrs rXr zScrollFrame.onLeaveNsc  G++ &&|444 &&|44444 &&~66666rS) rdrerfrrrr!rr  __classcell__)r s@rXrrs ( ( ( ( (, H H H K K K 9 9 9 H H H 7 7 7 7 7 7 7rSrcjeZdZdZdZd5dZd6dZdZd7dZd8d Z d9d Z d7d Z d Z d Z d8dZdZd6dZdZdZd5dZdZd5dZdZedddgdddZdZdZdZd Zd!Zd"Zd#Zd$Z d%Z!d&Z"d'Z#d(Z$d)Z%d*Z&d+Z'd,Z(d-Z)d8d.Z*d8d/Z+d8d0Z,d:d1Z-dddgfd2Z.d5d3Z/dgfd4Z0dS);Ticketerctjt|_d|_t |_tjt|_dSrU) collections defaultdictdict_datafnamerccache hashes_cacher~s rXrzTicketer.__init__Zs? ,T22  hh '3D99rSc||_tjt|_t |jd5}t ||_ddddS#1swxYwYdS)z' Load CCache from file rbN) r0r,r-r.r2openrreadr1r`r0fds rX open_filezTicketer.open_file`s '3D99 $*d # # ,r ++DK , , , , , , , , , , , , , , , , , ,s'A//A36A3Nc|r||_|jstdt|jd5}|t |jcdddS#1swxYwYdS)z) Save opened CCache file z.No file opened. Specify the 'fname' argument !wbN)r0 ValueErrorr5writerr1r7s rXsavez Ticketer.saveis  DJz OMNN N $*d # # 0r88E$+..// 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0s'A))A-0A-Fc j|jjstddStdfd}t|jjD]\}}|jjdkrt|d|jd|jt| dtt||j ||j ||j ||jfgd gtdS) z. Show the content of a CCache zNo tickets in CCache !NzTickets:c~|dStj|r tjnd}|dS)NNone)tzz%d/%m/%y %H:%M:%S)r fromtimestamprutcstrftime)rzrDs rX_to_strzTicketer.show.._to_str~s@yv*11N$OOO::122 2rSrz. z -> z %ticket_flags%)z Start timezEnd timez Renew untilz Auth time)r1rprint enumeraterrrrrsprintfrrrrr)r`rDrFicreds ` rXshowz Ticketer.showtsq{&  * + + + F *    3 3 3 3 3!!899  GAt}$)) AAK$$&&&&K$$&&&     $,,233 4 4 4 $GDN33#GDL11#GDO44#GDM22 LL      GGGG3  rScd ddlm}||S#t$rt|cYSwxYw)Nr)prompt)prompt_toolkitrN ImportErrorinput)r`msgrNs rX_promptzTicketer._promptsT  - - - - - -6#;;    ::    s //c|rt|}n|rt|}ntd|sq||jvr#||j|vr|j||}nEd|d|d}t ||}|dkrt jdt|||}||j||<|r)|r'|j r ||j|t|j <|S)Nz No cksumtype nor etype specifiedz Enter the z hash for z (as hex): sӴ5Ӵ5zBThis hash is the LM 'no password' hash. Is that what you intended?)r cksumtyper) r,r-r<r2r rSrwarningrIrU)r`spnrrUhashhashtyperRrs rX _prompt_hashzTicketer._prompt_hashs0  A#E*HH  A#I.HH?@@ @ d'''H8I#8N,N,N(-h7?GxxM c!2!233TUU$+\===+/#x(  G5 GS] GBFD c "< #> ? rScz|jj|}t|jj}|9|||jjj |} |j |S#t$r. |j |=n#t$rYnwxYwwxYw)z< Get the decrypted ticket by credentials ID NrrX)r1rr"rrOrZgetSPNencPartrrdecrypt Exceptionr2 IndexError)r`rJrrXrKrs rX dec_ticketzTicketer.dec_tickets{&q))** ;## k'+$C  ;&&s++ +    %cjjll33       s0(B B: B('B:( B52B:4B55B:c|jj|}t|jj}|r+|||||}|||jj j |}|j |t|| |||j|dS)z= Update a decrypted ticket by credentials ID )rXkdc_hashr\N)r1rr"rrO_resign_ticketr]rZr^rrencryptrrrr) r`rJdecTktresignrXrdrKrrs rX update_ticketzTicketer.update_tickets {&q))**  (( ! )F JJLL+#'    Cv///    J           rSc||jj|}nt}t|tr|9|||jjj |}|j |}| |||j |nzt|tjr|j}n1t|tjr|j}nt'd| |j||j|j|!|jj|dSdS)z Import the result of krb_[tgs/as]_req or a Ticket into the CCache. :param obj: a KRB_Ticket object or a AS_REP/TGS_REP object :param sessionkey: the session key that comes along the ticket Nr\zUnknown type of obj !)r1rr isinstancer"rZr]r^rrr_rrrr# RES_AS_MODEasrep RES_TGS_MODEtgsrepr<rrrappend)r`resrrX_inplacerKrgreps rX import_krbzTicketer.import_krbsd  ;*84DD>>D c: & & {''JJLL++/( [((--F      ""     #~9:: :iC!<== :j !8999           K # * *4 0 0 0 0 0  rSc|jj|}t|jj|j|j|j fS)zA Export a full ticket, session key, UPN and SPN. ) r1rr"rrOrrrrr)r`rJrKs rX export_krbzTicketer.export_krb's`{&q) t{' ( ( M   ! ! K     K       rSc\||\}}}}t||||S)z4 Create a KerberosSSP from a ticket )STKEYUPNSPN)rvr$)r`rJrrupnrWs rXsspz Ticketer.ssp3sA(,q'9'9$ C     rSc tt}|dpdtjvrt ddSt fdtjDtt|j ttd|j gtdt  |j_|jj||t)|jjd z |d || dS)z4 Add a decoded ticket to the CCache zoWhat key should we use (AES128-CTS-HMAC-SHA1-96/AES256-CTS-HMAC-SHA1-96/RC4-HMAC) ? [AES256-CTS-HMAC-SHA1-96]: zAES256-CTS-HMAC-SHA1-96zUnknown keytypeNc3.K|]\}}|k |VdSrUrh)rykvrs rXr{z%Ticketer._add_cred..Ms+FF41a1::Q::::FFrSskrbtgtrrr)r)rprr^rTrhrXrd)rrSr,valuesrGnextitemsrr"rr%rr r rrOr1rrprir)r`rgrXrdrKrs @rX _add_credzTicketer._add_cred?s`~~ LLB   ))   +-- - - # $ $ $ FFFFF<#5#7#7FFFFF m#+I66  *!__ &       &&t,,,   ' ( (1 ,       rSc 4 |d|dpd}|d|dpd}|d|dpd }|d d |d pd dD}|dt |dpd}|dt |dpd}|dd}|8|dpg}|rd|dD}|dt |dpd} t jtj d} tj } tj tj| d} idt#d d!t%| jt)| jd"d#t-|d$t-|gt%d%d&d't/| d(t/| t1| )zd*t/| t1| )zd+t/| t1| )zd,|| d-|d.d/|d.d0|| t1d1)z d2|dd3|d.d4|d5d6d7d6id8d6d9d6d:d6d;d<d=d6d>|d?d%dd@dAdBddC|dD|dEdF|DdGddH|dIdJdKdL|DdMddNgidO|| dP|dQdRdS|dT|dU|dV|dW|dX|dYd%dZdRd[d\gd]gd^d_d`|dX|dadbdcdddedfdgdbdhdddidfdjdkdddfdkdddfdl} || }||dS)mz* Create a Kerberos ticket userz User [User]: UserdomainzDomain [DOM.LOCAL]: z DOM.LOCAL domain_sidzDomain SID [S-1-5-21-1-2-3]: zS-1-5-21-1-2-3 group_idscPg|]#}t|$Srh)rstriprxs rXrz*Ticketer.create_ticket..ts6   AGGII   rSz%Group IDs [513, 512, 520, 518, 519]: z513, 512, 520, 518, 519,user_idzUser ID [500]: 500primary_group_idzPrimary Group ID [513]: 513 extra_sidsNzExtra SIDs [] :c6g|]}|Srh)rrxs rXrz*Ticketer.create_ticket..s GGGAaggiiGGGrSdurationzExpires in (h) [10]: 10r) microsecondrr 01000000111000010000000000000000rrrrrrrr)hoursrr VI.LogonTime VI.LogoffTimeNEVERVI.KickOffTimeVI.PasswordLastSet VI.PasswordCanChangeVI.PasswordMustChangeVI.EffectiveName VI.FullNamerVI.LogonScriptVI.ProfilePathVI.HomeDirectoryVI.HomeDirectoryDriveVI.UserSessionKeysVI.LogonServerVI.LogonDomainName. VI.LogonCountFVI.BadPasswordCount VI.UserIdVI.PrimaryGroupId VI.GroupIdscg|]}|ddS) RelativeId Attributesrhrxs rXrz*Ticketer.create_ticket..s7 #$"#rS VI.UserFlagsVI.LogonDomainIdVI.UserAccountControl VI.ExtraSidscg|]}|ddS)rSidrrhrxs rXrz*Ticketer.create_ticket..s MMMQQa88MMMrSVI.ResourceGroupDomainSidVI.ResourceGroupIds CI.ClientIdCI.Name UPNDNS.Flags UPNDNS.Upnr|UPNDNS.DnsDomainNameUPNDNS.SamName UPNDNS.Sid-CC.ClaimsArrayszad://ext/AuthenticationSilozT0-siloIdType StringValuesClaimsSourceType ClaimEntriesAI.FlagsPAC_WAS_REQUESTEDREQ.SidSC.SignatureType SC.Signatures SC.RODCIdentifierrSKC.SignatureType KC.SignatureKC.RODCIdentifierTKT.SignatureTyper TKT.SignatureTKT.RODCIdentifierEXKC.SignatureTypeEXKC.SignatureEXKC.RODCIdentifier) getrSuppersplitrrnowrrDreplacerandom SystemRandomrI random_to_keyrHAES256_CTS_HMAC_SHA1_96 randbytesrr rr rrrr_time_to_filetimerrsplit_utc_to_mstimelower _build_ticketr)r`kwargsrrrrrrrrnow_timerandrstorers rX create_ticketzTicketer.create_ticketfsOzz&$,,"?"?"I6JJ t||$:;;J{QQSS  ZZ  LL8 9 9 M=M  JJ   LL!HII10%**       **YDLL9J,K,K,Tu(U(UVV!:: DLL1K$L$L$UPU V V  ZZ d33  &788>BJ HGG1A1A#1F1FGGG :: DLL)@AAITJJ  < --55!5DD"$$  2DNN24F4F  ^ _%GHH^  ' 22'00^  )&11^  24889(OO^  -h77^  .x)(:S:S:S/STT^  ,X 8Q8Q8Q-QRR^  .x)(:S:S:S/STT^ $ D2283E3E3G3GHH%^ & T33G<<'^ ( d44W==)^ * !$"8"8IB////::<<##+^ 0 #D$:$:1$=$=1^ 2 $T%;%;G%D%D3^ 4 5^ 6 27^ 8 b9^ ^ : b;^ < =^ > $R?^ @ A^ B bC^ D !&--Q"7"7":E^ F RG^ H "1I^ J K^ L !1M^ N  # O^ \ B]^ ^  _^ ` $Sa^ b MM*MMMc^ d (e^ f "2g^ ^ ^ j 4..x/A/A/C/CDDk^ l tm^ p Aq^ r TTT6<<>>>:s^ t #FLLNNu^ v dw^ x ZZZ9y^ | ()#@$%,5%   }^ V +W^ Z ***gg6[^ ^ _^ ` La^ b c^ f g^ h Li^ j k^ n o^ ^ p*"%"$*#&{^ ^ ^ @  '' srSc |sdStjd|}|std|zg}|dr2d|ddD}|r{t t|dttj dt|ddd | Stt|dttj dt|ddd | S) NzS-(\d+)-(\d+)-?((?:\d+-?)*)zInvalid SID format: %src,g|]}t|Srhrrxs rXrz'Ticketer._build_sid..s@@@Q#a&&@@@rSrrz>Qr)Value)RevisionIdentifierAuthority SubAuthority) rematchrr<grouprrFrrGstructrrBr@)r`sidstrmsdnm subauthorss rX _build_sidzTicketer._build_sidse 4 H3V\\^^ D D @5>?? ? 771:: A@@!''!***:*:3*?*?@@@J  QWWQZZ$B +dC OO<td?;d@tdA;dBtdC;dDtdE;dFttdGddHItdGdHdIgIdJtdK;dLtdM;dNdOdPdQdRdSdTdUdVdWdXDdYdZd[d\d]ddgd^d_d`gdadbdcrfdddcDnddedfdgdhrdidhDndg|dr%t!djdkdlmgngz|dr%t!dndodpmgngzt#dqdrst%dtdudvfdwdxfdydzfd{d|d}~fggz|r%t'dt)|gddddgngzd"rt+d"gdgngzd$r,t-d$d}~gngz|d&r%t!dddmgngz|d(r%t!dddmgngzgg S)NrFc\g|])}t|dd|dD*S)rcg|]y}t|d|dt|dt|dddz|ddzS)rrr;r) ValueCountr)rvaluerrValues)r0rrEcountrryces rXrz5Ticketer._build_ticket...s & & &!#(#%d8%'Z'/(*6 *:35n3E3K3KC3P3PST3T575G5M5Mc5R5R+&+&+&("("("    & & &rSr)usClaimsSourceTyper)r1rycas rXrz*Ticketer._build_ticket..se$#!+-.@+A & &')&8 & & &rSr)ndr64 ClaimsArraysusReservedTypeulReservedFieldSize ReservedFieldc"|dzdkS)Nz.SignatureTyperrh)rzrs rXrYz(Ticketer._build_ticket..(s5-=)=#>"#DrSrS)trTypecontentsrrrrrrrrrrrrrrrz AD-WIN2K-PACLogon informationulTypeSCzServer SignatureKCz KDC Signature"Client name and ticket informationUPN and DNS informationClient claims informationrPAC Attributesr PAC RequestorTKTzTicket SignatureEXKCzExtended KDC Signaturer ndrendianlittle LogonTimer LogoffTimer KickOffTimerPasswordLastSetrPasswordCanChangerPasswordMustChanger EffectiveNamer)BufferFullNamer LogonScriptr ProfilePathr HomeDirectoryrHomeDirectoryDriverUserSessionKeyrrr LogonServerrLogonDomainNamer LogonCountrBadPasswordCountrUserIdrPrimaryGroupIdrGroupIdscHg|]}t|d|d Srrrr6rxs rXrz*Ticketer._build_ticket..sH:2:2:2 9: 5ECD\?CD\?565656:2:2:2rSr UserFlagsr LogonDomainIdr Reserved1UserAccountControlr Reserved3)rrrrrrr ExtraSidsrcpg|]2}t|d|d3S)rrr)r7rryrzr`s rXrz*Ticketer._build_ticket..sU;2;2;2 9: 5L<@OOAeH.sNB2B2B2 9: 5ECD\?CD\?565656B2B2B2rSrrr) SignatureType SignatureRODCIdentifierrrrrr)ClientIdNamerUpnr DnsDomainNamerSamNamerrrT)r)FlagsPayload) ClaimsSetusCompressionFormatrrr)rClaimsr)rX FlagsLength)rrrrrrr)BuffersPayloads)adTypeadData)seq) transited addressesrrrrrrrrauthorizationDatarh)r2rr&r r r!r%rrr?r<r8rArDr4rr>r;rCr:r3r9r=)r`rclaimSet_signature_sets`` rXrzTicketer._build_ticket s} " # !$$$56%( !$%"1HH6HDDDD'#AS1A1A.e Y/uj1? >,7w 3:&K()$K(/)+A0 5+9+2,;7J-.-.-.1*0>~d/C/C -40?;M121212-.-. 24 1*(0>~d/C/C -40?;J121212-.-. 24+1*0-<7[-.-.-.-<7P-.-.-. +*/1*J08 -40?;V121212-.-. 24M'1*\05Z/@ -40?;K121212-.-. 24_01*n05Y/? -40?;J121212-.-. 24q91*@0>~e/D/D -40?;M121212-.-. 24CB1*R0>~f/E/E -40?;S121212-.-. 24UK1*Z-Af-.f-.f-.6;ef-.:B(f-.;@:O:Of-.>@qbBB9:9:9: 9EAF@SB>>?bbBB9:9:9: :6 @2 @2 @2 @2Gf-.b=O;@AQ;R=2=2=2=2cf-.hAS;@AU;VA2A2A2A2if-.nC==Q :2:2:2:2f-.L;@:O:OMf-.N?Coo49:L4M?2?2?2Of-.T<=a&&Uf-.VDI4KD2D2Wf-.\;P:O:O:O]f-.l493H;:;2;2;2;2 >C>=R ;2;2;2;26:of-.pHL49:U4VH2H2H2qf-.H499N3O B:B2B2 >C8M>6 B2B2B2B26:Kf-.h2*j0>~d/C/C -40BBG8JC6?DN>SCH8KD6 121212 -. -.24mw2*H0>~d/C/C -40BBG8JC6?DN>SCH8KD6 121212 -. -.24KF2*P-<9>}9M5:95E-.-.-.-96;N6K9>8=l8K56 9H8=>T8U56 9B8=>N8O56 9>8<~e/D/D -40BBG8KC6?DO>TCH8LD6 121212 -. -.24sZ2*N0>~f/E/E -40BBG8LC6?DDT>UCH8MD6 121212 -. -.24Qi2*[w,&w,&w,&z!"z!"z!"|!~ ~ ~ AAACEEE'Y Y Y Y rScnt|jD]\}}|j|kr|j|cS dSrU)rHr^r!r_)r`pacr!rJbufs rX_getPayloadIfExistzTicketer._getPayloadIfExistsH ,, ' 'FAszV##|A&&&$trSctj|}|dt|D]\}}t j||dx||jn||d<}tj||d|ddtj || |dd | dd dS) Nrzrrrrtextw)rowcolumnsticky) textvariablee)weight) rKrrrHr StringVarr/LabelgridEntrygrid_columnconfigure)r`elementfields datastorefrmrJfldrs rX _make_fieldszTicketer._make_fieldssi   c'' M MFAsKM<3q6LLL 9,TZZ)SV Dq IcA ' ' ' , ,1S , I I I Ic * * * / /Aa / L L L L   1 -----rSc|D]V}tj||vx||<}tj|||tjdddWdS)Nrn)rpvariablerrzrrrpadxpady)r BooleanVar CheckbuttonWr)r`r}keysrrflgrs rX_make_checkboxzTicketer._make_checkboxsy  C!#SE\!B!B!B BIcNQ N7q F F F K Kqq L      rSc"tj|}tj|ddtj|dj}|dd |j D]:}|tj  ||;t|D]\} }  d d | | dddfdGfddtjfd} fd} fd} tj|}tj|d| dddtj|d| dddtj|d| ddd||d dS)!Nroheadingsr)rsrLheightrrrrrr)rrendr indexiidrrzrrcdfdD}|jn<dS)Nc<g|]}|dSr)item)ryrztrees rXrzCTicketer._make_table.._update_datastore..s'LLL1 !X..LLLrS) get_childrenr/)childrenrnamer`rs rX_update_datastorez/Ticketer._make_table.._update_datastoresCLLLL8I8I8K8KLLLHEM9,TZZ)T B B BrSc@eZdZfdZfdZfdZdZxZS)(Ticketer._make_table..EditDialogci|_|di|_d|_t |j|i|dS)NrF)rOpopinitial_valuessuccessrrr`argsr EditDialogr s rXrz1Ticketer._make_table..EditDialog.__init__sO &,jj2&>&>#$ 0j$''0$A&AAAAArSc\|fdDj|S)NcJg|]}|j|df S)r)rr)ryrzdiags rXrzATicketer._make_table..EditDialog.body..s1JJJQa,00B778JJJrSr)rrO)rframerr`s` rXbodyz-Ticketer._make_table..EditDialog.bodysG!!JJJJ'JJJ"i"  rScLd|_t|j|i|dS)NT)rrokrs rXrz+Ticketer._make_table..EditDialog.oks2# *j$''*D;F;;;;;rScbtd|jDS)Nc3>K|]}|VdSrU)rrxs rXr{zBTicketer._make_table..EditDialog.values..s*AAQUUWWAAAAAArS)tuplerOrr~s rXrz/Ticketer._make_table..EditDialog.valuess-AAdi.>.>.@.@AAAAAArS)rdrerfrrrrr()r rrr`s@rXrrs B B B B B B        < < < < < < B B B B B B BrSrcd}|jrLt}dd||dS)NAdd)titler rrr)rrrinsertr)dialogrJrrrs rXaddz!Ticketer._make_table..addsrZeD999F~ S))++,, 2U&--// RRR       rSc *}|sdStt|d}d|}|jr)||dS)NrEdit)rr rr)focusr.ziprrr)selectedrrrrrrs rXeditz"Ticketer._make_table..editszz||H #gtyy8'D'DEEFFFZfT&IIIF~ < (6==?? ;;;       rScr}|r|dSrU)rdelete)rrrs rXremovez$Ticketer._make_table..removes?zz||H & H%%%       rSrrprrrrrsrrrRemoverrm)rK LabelFrameTreeviewrrrrrrsrCENTERheadingrHrtksdDialogrButtonrz)r`r}rrlstrwraprhrJrrrrrbtnsrrrs` `` ` @@@rX _make_tablezTicketer._make_tables~gD111|Dz!LLLmDTZHHH gC((( cg... $ $A KK")K , , , LLL # # # #nn C CFAs KKrAcK B B B B s" --- N N N N N N N N  B B B B B B B B B B B B,                     y 4eS111661QR6PPP 4fd33388Qqr8RRR 4h777<<1SU<VVV  s rSc tj| tjt x|j|<  fd |D] } | fd} fd}tj|} tj| d|dddtj| d |dd d| dS) Ncd}tjd}|dd|d|||dS)NrBorderFrame.TFrame)stylerr)rrrrrs) grid_sizerKrrz)rrJeltrOfunctbls rXrpz#Ticketer._make_list..appendsb "A)C';<<.adds# F:??$$ % % % % %rSct}tjdd|dz z}| ||dz krdS|dd|=dS)NDeletez-Input the index of the Claim to delete [0-%s]r)r r)rrrs)r grid_slavesr askintegerdestroy) slavescountrJrOrs rXrz#Ticketer._make_list..deletescoo//00K?;QR?SA yA a// OO!O , ,Q / 7 7 9 9 9QrSrrrrrrr) rKrrr,r-r.r/rrz) r`r}rr fields_listrrrrrrprOrs ` ` @@@rX _make_listzTicketer._make_lists8i    !,!8!>!>> 3$ $ $ $ $ $ $ $   C F3KKKK & & & & & &      y!! 4eS111661QR6PPP 4h777<<1SU<VVV rSrz>qAArSc@t||jjz dzS)Nr)rrrrs rXrzTicketer._utc_to_mstimes A(..#5666rSc|tj||jjSrU)rrstrptimerrrrs rX _time_to_intzTicketer._time_to_ints<""  a!1!6 7 7 A A C C   rScZttj||jjSrU)rrrrrrs rX _time_to_asn1zTicketer._time_to_asn1s#$X%6q$:J:O%P%PQQQrSc2t|tr)|dkrtddSt|tr||}n||}t|dz dz|dzS)Nr)dwHighDateTime dwLowDateTimer)rkstrrr5rrrs rXrzTicketer._time_to_filetimes a   Q!''))w"6"6:ZPPP P a   '!!!$$AA##A&&AGz1j.    rSc||jdkr |jdkrdS||jdz|jzS)Nrrrr)rrrrs rX_filetime_totimezTicketer._filetime_totime)sD z ) )ao.K.K7  !"2b"8AO!KLLLrScJ|r |jjsdS|S)Nr)rrsummary)r`sids rX _pretty_sidzTicketer._pretty_sid.s* #17 2{{}}rSc6 |d}|s7|jtdt }n|j}|d|jfd|j fd|j fd|j fd|j fd|j fd |jjjjd jfd |jjjjd jfd |jjjjd jfd |jjjjd jfd|jjjjd jfd|jjjjd jfdt-|jfdt-|jfdt-|jfdt-|jfg|dddgd|jjjD|dt-|jfdt=dd|j j!Dfd|j"jjjd jfd|j#jjjd jfd$|j%jfdt-|j&fg|d d!dgfd"|j'r|j'jjngD|d#$|j(r |j(jndfg|d$ddgd%|j)r|j)jjngDdS)&Nrr r-r.r/r0r1r2r3rr5r6r7r8r9r=r>r?r@rArrc^g|]*}t|jt|jf+Srhrrrrxs rXrz1Ticketer._getLogonInformation..nsA   Q\""C $5$56   rSrEr:rSc3$K|] }|jV dSrUrrxs rXr{z0Ticketer._getLogonInformation..zs$ O OA O O O O O OrSr;r<rFrHrJrcvg|]5}|jjt|jf6Srh)rrrrrrLs rXrz1Ticketer._getLogonInformation..sJ   !!!%+..AL0A0AB   rSrMrNc^g|]*}t|jt|jf+Srhrrxs rXrz1Ticketer._getLogonInformation..sA   Q\""C $5$56   rS)*rkr^rpr<r8rrrr-r.r/r0r1r2r3r4rwr5r6r7r8r9rr=r>r?r@rrArEr r}r:rOr;r<rrFrHrJrMrN)r`rir} logonInfos` rX_getLogonInformationzTicketer._getLogonInformation3s++C<<  ( K  jAAA B B B,..II!I  d33I4GHHIt44Y5IJJK 5 5i6K L LM%)))*CDD ()))*EFF ))))*FGG $+28>qAGNNPP &-39!<BIIKK ")06qAGNNPP )07=CAFLSSUUs9#7889#S)C%D%DE3y/001!3y'?#@#@AW, / / / `    < (  "+17         c)"5667$ O O1I1N O O OOOfhh ")06>!      < (  !1I.4::     rSc||d}|s6|jtdt }||d||jfd|jfgS)Nrr rSrT) rkr^rpr<r;rrrSrT)r`rir} clientInfos rX_getClientInfozTicketer._getClientInfos,,S*==  + K  jAAA B B B(**J  T..z/BCCD)    rSc ||d}|s6|jtdt }||d|jfd|jfd|jj r|j r|j ndfd|jj r!|j r| |jndfgS)N r rUrVrWr UpnDnsSid)rkr^rpr<rCrrUrVrXS SamNameLenrWSidLenrr)r`rir} upndnsinfos rX_getUPNDnsInfozTicketer._getUPNDnsInfos,,S*==  ( K  jAAA B B B%J   ' *":;!').8.CJ&&  !').8.?D$$Z^444     rSc |d}|rt|tjr+|jt dg}nE|jddjd}fd} ||d|tgS) N r r\rZrc |dt|jfg||dgdd|dD|dS)Nrrrrc  g|]}|dt|jdd|ddDfS)rr c3>K|]}|VdSrU)rw)ryzs rXr{zETicketer._getClientClaims..func...s>!! !HHJJ!!!!!!rSrr)valueofrwrrr})ryrs rXrz;Ticketer._getClientClaims..func..s    $..00AF !!%&YYx%8%8%@%@%P%P!!!   rS)rrrrr)rrzrr`s rXrz'Ticketer._getClientClaims..funcs   'Q-A)B)BC$       (((  YY~66   $      rS)r)rrrr) rkrkr r^r^rpr<rrrr1)r`rir} clientClaims claimsArrayrs` rX_getClientClaimszTicketer._getClientClaimss..sJ??  z,8JKK  K  jAAA B B BKK"**844%%ww~..       4 ##444    rSc^||d}|s8|jtdt d}t |jdd}i|jd<| |ddg||jddS) Nr r)rX+ pacAttributesrPAC_WAS_GIVEN_IMPLICITLY) rkr^rpr<r9rrXrr/r)r`rir}rrs rX_getPACAttributeszTicketer._getPACAttributess//Z@@  9 K  jAAA B B B/a888MM'*++11#66&( ?#  #*   J '     rSc||d}|s6|jtdt }||d||jfgS)Nr ReqSid)rkr^rpr<r=rrr)r`rir} pacRequestors rX_getPACRequestorzTicketer._getPACRequestors..sJ??  + K  jAAA B B B(??L  x!1!1,2B!C!CDE   rSc||d}|s6|jtdt }||d|jt|jndfdt|j  fd|j fgS)Nr SRVSignatureTyper SRVSignatureSRVRODCIdentifier rkr^rpr<r>rrPrr rQrwrR)r`rir}serverChecksums rX_getServerChecksumzTicketer._getServerChecksum 00jAA 2 K  jAAA B B B/11N  '%3?4555   >+C!D!D!K!K!M!MN$n&C&J&J&L&LM    rSc||d}|s6|jtdt }||d|jt|jndfdt|j  fd|j fgS)Nrr KDCSignatureTyper KDCSignatureKDCRODCIdentifierr,)r`rir} kdcChecksums rX_getKDCChecksumzTicketer._getKDCChecksum3s--c:>>  / K  jAAA B B B,..K  '"0< 1222   ;+@!A!A!H!H!J!JK$k&@&G&G&I&IJ    rSc||d}|s6|jtdt }||d|jt|jndfdt|j  fd|j fgS)Nrr TKTSignatureTyper TKTSignatureTKTRODCIdentifierr,)r`rir}ticketChecksums rX_getTicketChecksumzTicketer._getTicketChecksumFr/rSc||d}|s6|jtdt }||d|jt|jndfdt|j  fd|j fgS)Nr EXKDCSignatureTyperEXKDCSignatureEXKDCRODCIdentifierr,)r`rir} exkdcChecksums rX_getExtendedKDCChecksumz Ticketer._getExtendedKDCChecksumYs//Z@@  1 K  jAAA B B B.00M  )$2> 3444  "9]-D#E#E#L#L#N#NO& (D(K(K(M(MN    rSc !ttd|||}|jjdjdjdj}tj}|dt|}|j }tj |d} tj |d} tj |d|j dd d tj} | d | dddtj| dd} | dd|d|} ijd<| t0| jdtj| dd}|dd|dt5|jjjfdt=|jjj fg| d|j!j fgtj| dd}|dd|dt5|j"j#jfg$|ddgd|j"j%Dtj| d d}|dd|d!t5|j&j'jfd"|j&j(j fg| d#|j)j*+d$fd%|j,j*+d$fd&|j-j*+d$fd'|j.j*+d$fgtj| d(d}|dd/||tj| d)d}|dd0||tj| d*d}|dd1||tj| d+d}|dd2||tj| d,d}|dd3||tj| d-d}|dd4||tj| d.d}|dd5||tj| d/d}|dd6||tj| d0d}|dd7||tj| d1d}|dd8||| ddtj92| d dtj92|d3d4d56|:idtwd7<fd8t0Dd9t{t0 d:zzzdt}tjd@ttjd@d;dtjd@dd<jdDt}tjd@d=d#Djd#@d%Djd%@d&Djd&@d'Djd'@d>Ejd?@d@EjdA@dBEjdC@dDEjdE@dFEjdG@dHEjdI@dJjdK@dLjdM@dNjdO@idPjdQ@dRjdS@dTjdU@dVtjdW@dXjdY@dZjd[@d\tjd]@d^tjd_@d`tjda@dbtjdc@dddejdfDdgtjdh@dijdj@dktjdl@dmdnjdoDdpjdq@drdsjdtDiduFjdv@dwjdx@dyddzjd{@d|jd}@d~jd@djd@ddjdGDdd<fddDdjd@dtjd@dtjd@dtjd@dtjd@pddtjd@dtjd@dtjd@pdtjd@tjd@tjd@pdtjd@tjd@d}H|}| ||j}I|||dS)z6 Edit a Kerberos ticket using the GUI Nz=tkinter is not installed (`apt install python3-tk` on debian))rrXrzTicketer++ (@secdev/scapy)r)paddingQuitrrr)rsrr columnspanaltrgroover)reliefrrX)rprrz)rrrrrrrrrrrcBg|]}|jfSrh)rrwrxs rXrz(Ticketer.edit_ticket..s% = = =1aellnn  = = =rSrcrrrz UTCrrrrr$r%r&r'r(zServer checksumz KDC checksumzTicket checksumzExtended KDC checksum)rsrrrttoprTrrc3jK|]-}jd|rdndV.dS)rr0Nr/rrLs rXr{z'Ticketer.edit_ticket..WsUEF4:g.q15577@CCSrSrMrrc8g|]}t|dS)r)rrxs rXrz(Ticketer.edit_ticket..bs223'!--rSrrr-rr.rr/rr0rr1rr2rr3rr5rr6rr7rr8rr9rr:rr;rr<rr=rr>rr?rr@rcdg|]-}t|dt|dd.Srrrrrxs rXrz(Ticketer.edit_ticket..sK #&ad))"%ad))rSrArrErrFrrHrcJg|] }|dt|dd!S)rrrrrxs rXrz(Ticketer.edit_ticket..sE Q4"%ad))rSrJrrMrcdg|]-}t|dt|dd.SrQrrxs rXrz(Ticketer.edit_ticket..sK$$$ #&ad))"%ad))$$$rSrNrrSrrTrrrUrrVrrWrr rcg|]<}t|dd|dDd=S)rcXg|]'}|dt|d|dd(S)rrrrrrs rXrz3Ticketer.edit_ticket...sL%%%  #%Q%$'1JJ,.qE%%%rSrr)rrrs rXrz(Ticketer.edit_ticket..sq   ),B/A,B,F,F,H,H(I(I%% #%^"4 %%%     rSrrrc3fK|]+}jd|'|V,dS)rNrNrLs rXr{z'Ticketer.edit_ticket..sU!!:o.q15577!!!!!!!rS)rr rr$rr)rr*rr+rr1z-1rr2rr3rr7r8r9r>r?r@rrX)JrrPrbrerbraTkrrrrKrrrrzStyle theme_userrr get_field get_flagsr/rr/rrrrrr rrwrrrrrrcrrr pretty_timerstriprrrrr rrr!r&r.r5r;rBNmainlooprr}rr rrr r rrrrrrri)r`rJrrXrriroot scrollFramer tk_tickettk_pacttkstyletk_flagsrtk_keytk_cname tk_transited tk_logoninfo tk_clientinfo tk_upndnsinfotk_clientclaimstk_pacattributestk_pacrequestortk_serverchksumrs` rX edit_ticketzTicketer.edit_ticketls :O ooaSto44#'*1!48;Buww /000"$'' "Ic1--- 3*** 3VT\:::??! @   9;;5!!!     > &     3Q ''' g&&0055  7 HmUDJw &     3Q '''   *.//        I = = (< = = =    ~ &   s+++   ,011 M*.5577   S\5<>vFFGCK3::6BBCcm7>>vFFG     ~ $&   s+++ !!#|444 5&   !,,, C/// *&   !,,, C///. ,&    #A... c?333> !&    3Q/// s$4555.  &    #A... c?333. "&    #A... _555. &    #A... S/222. "&    #A... _555. (&    #A... $$S/::: aQrt444 1!BD 111e&>>> { _JW#m,,,r123{  'DJy,A,E,E,G,G(H(HII' $*Z2H2L2L2N2N(O(OPP{  )$*X*>*B*B*D*DEE{  7;z,7O)TZ -C-G-G-I-I)J)JKK { & **4:j+A+E+E+G+GHH'{ ( ++DJ{,C,G,G,I,IJJ){ * t))$*Y*?*C*C*E*EFF+{ , ++DJ{,C,G,G,I,IJJ-{ 2 D224:k3J3N3N3P3PQQ3{ 4 T33DJ|4L4P4P4R4RSS5{ 6 d44TZ 5N5R5R5T5TUU7{ 8 !$"8"8 ,-1133##9{ > #D$:$: ./3355%%?{ D $T%;%; /04466&&E{ J  ? ; ? ? A AK{ L 4:j15577M{ N dj7;;==O{ { P dj7;;==Q{ R  ? ; ? ? A AS{ T $TZ0D%E%I%I%K%KU{ V 4:6F+G+K+K+M+M!N!NW{ X dj7;;==Y{ Z !$*->"?"C"C"E"E[{ \ SL!9!=!=!?!?@@]{ ^ "3tz2D'E'I'I'K'K#L#L_{ ` TZ1557788a{ b TZ0@%A%E%E%G%G!H!Hc{ d  J/ e{ r C ; 7 ; ; = =>>s{ t  ? ; ? ? A Au{ v $S4H)I)M)M)O)O%P%Pw{ x  K0 y{ F (4L)M)Q)Q)S)SG{ H "$$ $67 $$$I{ { { X 4,,TZ -C-G-G-I-IJJY{ Z tz&)--//[{ ^ A_{ ` $*U+//11a{ b #DJ$?$C$C$E$Ec{ d dj37799e{ f $*[15577g{ j   *^4;;==   k{ H !!!!J!!!I{ T tz(+//11U{ X DJ/A$B$F$F$H$H I IY{ Z Idj&@&D&D&F&FGG[{ \ 4:6I+J+N+N+P+P!Q!Q]{ ` DJ/A$B$F$F$H$H$PD Q Qa{ b Idj&@&D&D&F&FGGc{ d 4:6I+J+N+N+P+P!Q!Qe{ h TZ0B%C%G%G%I%I%QT!R!Ri{ { j'tz.'A'E'E'G'GHH"+DJ7J,K,O,O,Q,Q"R"R"%dj1E&F&J&J&L&L&TPT"U"U' 3C(D(H(H(J(JKK#,TZ8M-N-R-R-T-T#U#Uu{ { { x  '' .s'@@!q~@@@@@@rS)r(rz/Cannot sign PAC: missing a compulsory signaturer()rUrXzkrbtgt/r|rrrrrr=)rerbrarrHr^r!r_rPrJmacsizerQKeyErrorr< cbBufferSizeOffsetanyrZr}r make_checksumr)r`rrWrXrdrpactmp_tktrisig_typerrjkey_srvkey_kdc ticket_sigextended_kdc_sig server_sigrus @rXrezTicketer._resign_tickets% $(+26q9@((**'+A.59!<C ,, . .FAszMMM$%cj!'*|A'D$J*S\!_-J"K"SSLO-- JJJ$%HIIIJ/3 Q,)- Q& @@@@'?@@@ @ @ PNOO O## z*$   ## 3!3a!788 8z*$     ELG % )! , 3 7 : A(/'<'<E'NN(( DMj! *9CCLz* + 5   .5-B-BE#JJ.. DMj! *9ICLz* + 5CJBWBW c C C   eJ'(2Z 6=5J5J  6 6  eJ'(2 s /5C%%C?ch|||}|||d||dS)a Resign a ticket from CCache :param hash: the hash to use to compute the Server Signature :param kdc_hash: the hash to use to compute the KDC signature (if None, not recomputed unless its a TGT where is uses hash) rWTrN)rbri)r`rJrXrdrs rX resign_ticketzTicketer.resign_ticket,s>ooado++ 1c$THMMMMMrSc \t|f||||d|}|sdS||dS)z Request a Kerberos TGT and add it to the local CCache See :func:`~scapy.layers.kerberos.krb_as_req` for the full documentation. )iprpasswordrpN)r(rt)r`r|rrrrprrqs rX request_tgtzTicketer.request_tgt7sJ WxuWWPVWW  F rSc ||\}} } } t| |f| |||||d|} | sdS|| dS)z Request a Kerberos TS and add it to the local CCache using another ticket :param i: the ticket/sessionkey to use in the TGS request See :func:`~scapy.layers.kerberos.krb_tgs_req` for the the other parameters. )rrrrenewrpadditional_ticketsNrvr)rt) r`rJrWrrrprrrrr|_rqs rX request_stzTicketer.request_stCs&*__Q%7%7" C    "1        F rScb||\}}}}t||d||dS)zz Use kpasswd in 'Set Password' mode to set the password of an account. :param i: the TGT to use. T)r| targetupn setpasswordrrN)rvr')r`rJrrrr|rs rX kpasswdsetzTicketer.kpasswdset_sN &*__Q%7%7" C       rSc ||\}}}}t||f|||d|d|} | sdS|| |dS)z Renew a Kerberos TGT or a TS from the local CCache using a TGS-REQ :param i: the ticket/sessionkey to renew. T)rrrrrN)rrr) r`rJrrrrrr|rWrqs rXrzTicketer.renewns (,q'9'9$ C    "1        F a(((((rSrU)F)NNN)NN)FNN)NNNN)1rdrerfrr9r>rLrSrZrbrirtrvr}rrrrrkrrrrrrrrrrrrrrr rrr!r&r.r5r;rBrqrerrrrrrhrSrXr*r*Ysm::: ,,, 0 0 0 0****X4*     D,1,1,1,1\        % % % % NHHHT4x x x t  . . . .EEEEN!!!F,  ### KBBB777   RRR    MMM  } } } ~       2, , , \   "      &   &   &   &g.g.g.g.R UUUUn N N N N    U$28     2))))))rSr*)m__doc__rrrr,rrrrscapy.asn1.asn1rrrr r scapy.compatr r scapy.configr scapy.errorr scapy.fieldsrrrrrrrrrrr scapy.packetr scapy.utilsrscapy.layers.dcerpcrscapy.layers.kerberosrrrr r!r"r#r$r%r&r'r(r)r*r+r,r-r.r/scapy.layers.msrpce.mspacr0r1r2r3r4r5r6r7r8r9r:r;r<r=r>r?r@rArBrCrDrEscapy.layers.smb2rFrGscapy.libs.rfc3961rHrIrJtkinterrtkinter.simpledialog simpledialogrrKrPrMrjrrrrrrrrrr*rhrSrXrs 3222222222 .-------''''''                           ######((((((*2 ?>>>>>>>>>'''''' BBB"""""6""""""""&"""."""""&""""""""v""" " " " " " " " """"""""""""""""">5>5>5>5>56>5>5>5BV>7777777777bh777777zj)j)j)j)j)j)j)j)j)j)sC//C98C9