o j @sddlZddlZddlZddlZddlmZmZddlmZddl m Z ddgddfde de e d e d e d e e d e f d dZddZddZedkrQedSdS)N)KerberosClientFactorykerberos_url_help_epilog) kerberoast)List)Fconnection_urlusersdomainout_fileetypes cross_domainc sz2g}g}t|}t|tdur|g}g} |D]2} t| trLt| rGt| d} | | Wdn1sAwYq| | qt|tdurW|g}g} |D]} t| tro| dd| dDt|try| | q[| }| }|dur|D]}|ddkr| dd}nq|j}|durtd g}|D]}|ddkr| | dd q| |qd}t|||||d 2z3dHW\}}}|dur| ||fq| ||fq6|durt|d d d} |D] \}}| |dqWdn 1swY|D] \}}td||fq|D] \}}t|q(WdStyL}z tWYd}~dSd}~ww)NFrcSsg|]}t|qS)int).0xrr/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/minikerberos/examples/spnroast.py "szspnroast..,@zNo domain specifiedr)override_etyperw)newlinez z %s error: %s)rfrom_url isinstanceliststrpathlibPathexistsopenextendread splitlinesappendsplitrfind get_credsr Exceptionrwriteprint traceback print_exc)r r r r r r results_ok results_errcu users_finaluserf etypes_finaletypeusernameusers_nodomainreserr_resulterrrspnroast s         $     rAcsddl}|jd|jtd}|jddd|jddd|jd d d d |jd ddd|jddddd|jdddd|jddddd|}|jdkrWtjtj dn|jdkrdtjtj dntjddt |j dkrwt ddSt|j|j |j|j|j|jIdHdS) Nr Kerberoast) descriptionformatter_classepilogkerberos_connection_urlzothe kerberos target string in the following format kerberos+://\@)helpr z6Realm. Use this if you specify username in "spn" fieldr *zPUser/username to kerberoast. Can be a file with usernames, or a single username.)nargsrGz--cross-domain store_truezSPN is in another domain.)actionrGz-ez--etypesz23,17,18z*Encryption types to use. Default: 23,17,18)defaultrGz-oz --out-filez3Write results to this file instead of printing themz-vz --verbosecount)rKrL)levelrz"Please provide users to kerberoast)argparseArgumentParserRawDescriptionHelpFormatterr add_argument parse_argsverboselogging basicConfigINFODEBUGlenr r/rArFr r r r)rOparserargsrrramainOs(   (r\cCsttdS)N)asynciorunr\rrrrmainisr___main__)rUr]r0r"minikerberos.common.factoryrrminikerberos.securityrtypingrr!rboolrAr\r___name__rrrrs  8F