Home page logo

nmap-dev logo Nmap Development mailing list archives

[NSE] New script krb5-enum-users
From: Patrik Karlsson <patrik () cqure net>
Date: Wed, 19 Oct 2011 22:56:48 -0400

Hi all,

I've added a new script called krb5-enum-users that does user enumeration
over Kerberos:

The script discovers valid usernames by querying the Kerberos service for a
When an invalid username is requested the server will responde using the
Kerberos error code KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN, allowing us to
that the user name was invalid. Valid user names will illicit either the
TGT in a AS-REP response or the error KRB5KDC_ERR_PREAUTH_REQUIRED,
that the user is required to perform pre authentication.

Sent through the nmap-dev mailing list
Archived at http://seclists.org/nmap-dev/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]