o jX0 @sddlZddlZddlZddlmZddlmZmZddlm Z ddl m Z ddl m Z ddlmZddlmZzeZWn eyIeZYnwGd d d Zed krddlZddlZzddlZdd lmZmZmZWneyed e dYnweej!ej"dddZ#e#j$dddde#j$dde%dde#j$dddde#j$ddddde#j$d dd!de#j$d"dd#de#&d$Z'e'j$d%dd&de'j$d'dd(de'j$d)dd*de'j$d+dd,de#&d-Z'e'j$d.dd/d0d1e'j$d2dd3de'j$d4dd5de'j$d6dd7d8d1e#&d9Z'e'j$d:dd;dd1e(ej)dkr3e#*e de#+Z,e-e,j.e,j/e,j0durOe1d?e de,j2dur_e1d@e de e,j3\Z4Z5Z6Z7e7dAkrwe1dBe de7dCkrcgZ8e,j9dure:dDe,j;dure8e,j=dE'Z?e?D]Z@e@AZ3e3dAkre3ddFkre8 (Use this credential to authenticate to SMB and list domain users (low-privilege account) or LIST (if you want to parse a target file) )actionhelpz-rodcNoz!Number of the RODC krbtgt account)rir>rjz-rodcKeyz*AES key of the Read Only Domain Controllerz-full store_trueFzaRun the attack against all domain users. Noisy! It could lead to more TGS requests being rejected)ridefaultrjz-debugzTurn DEBUG output ONz-tsz&Adds timestamp to every logging outputz LIST optionz-domainz6The fully qualified domain name (only works with LIST)z-kdcz+KDC HostName or FQDN (only works with LIST)z-tz9Attack only the username specified (only works with LIST)z-tfzDFile that contains a list of target usernames (only works with LIST)authenticationz-hashesz LMHASH:NTHASHz=Use NTLM hashes to authenticate to SMB and list domain users.)rimetavarrjz-no-passz&don't ask for password (useful for -k)z-kzUse Kerberos to authenticate to SMB and list domain users. Grabs credentials from ccache file (KRB5CCNAME) based on target parameters. If valid credentials cannot be found, it will use the ones specified in the command linez-aesKeyzhex keyzs          T                                            .