Formating

Author: NeffIsBack

nxc/helpers/pfx.py

@@ -67,7 +67,7 @@
 from minikerberos.common.target import KerberosTarget
 from minikerberos.common.ccache import CCACHE
 
-from impacket.krb5.ccache import CCache
+from impacket.krb5.ccache import CCache as impacket_CCache
 
 
 class myPKINIT(PKINIT):
@@ -164,7 +164,6 @@ def build_asreq(self, domain=None, cname=None, kdcopts=None):
         kdc_req_body_data["etype"] = [18, 17]  # 23 breaks...
         kdc_req_body = KDC_REQ_BODY(kdc_req_body_data)
 
-
         checksum = hashlib.sha1(kdc_req_body.dump()).digest()
 
         authenticator = {}
@@ -173,7 +172,6 @@ def build_asreq(self, domain=None, cname=None, kdcopts=None):
         authenticator["nonce"] = secrets.randbits(31)
         authenticator["paChecksum"] = checksum
 
-
         dp = {}
         dp["p"] = self.diffie.p
         dp["g"] = self.diffie.g
@@ -187,7 +185,6 @@ def build_asreq(self, domain=None, cname=None, kdcopts=None):
         spki["algorithm"] = keys.PublicKeyAlgorithm(pka)
         spki["public_key"] = self.diffie.get_public_key()
 
-
         authpack = {}
         authpack["pkAuthenticator"] = PKAuthenticator(authenticator)
         authpack["clientPublicValue"] = keys.PublicKeyInfo(spki)
@@ -233,7 +230,6 @@ def sign_authpack_native(self, data, wrap_signed=False):
             "serial_number":  self.certificate.serial_number,
         })
 
-
         si["digest_algorithm"] = algos.DigestAlgorithm(da)
         si["signed_attrs"] = [
             cms.CMSAttribute({"type": "content_type", "values": ["1.3.6.1.5.2.3.1"]}),  # indicates that the encap_content_info's authdata struct (marked with OID '1.3.6.1.5.2.3.1' is signed )
@@ -304,7 +300,6 @@ def truncate_key(value, keysize):
         elif etype == Enctype.RC4:
             raise NotImplementedError("RC4 key truncation documentation missing. it is different from AES")
 
-
         key = Key(cipher.enctype, t_key)
         enc_data = as_rep["enc-part"]["cipher"]
         logging.info("AS-REP encryption key (you might need this later):")
@@ -355,7 +350,7 @@ def printPac(self, data, key=None):
                     nthash = hexlify(credstruct["NtPassword"]).decode("utf-8")
 
             buff = buff[len(infoBuffer):]
-            
+
         if not found:
             logging.info("Did not find the PAC_CREDENTIAL_INFO in the PAC. Are you sure your TGT originated from a PKINIT operation?")
         return nthash
@@ -451,7 +446,7 @@ def dump(self):
         reqBody["till"] = KerberosTime.to_asn1(now)
         reqBody["nonce"] = random.getrandbits(31)
         seq_set_iter(reqBody, "etype",
-                      (int(cipher.enctype), int(constants.EncryptionTypes.rc4_hmac.value)))
+                     (int(cipher.enctype), int(constants.EncryptionTypes.rc4_hmac.value)))
 
         myTicket = ticket.to_asn1(TicketAsn1())
         seq_set_iter(reqBody, "additional-tickets", (myTicket,))
@@ -480,12 +475,11 @@ def dump(self):
         #  application session key), encrypted with the service key
         #  (section 5.4.2)
 
-
         # S4USelf + U2U uses this other key
         plainText = cipher.decrypt(sessionKey, 2, cipherText)
         specialkey = Key(18, unhexlify(self.__asrep_key))
         return self.printPac(plainText, specialkey)
-    
+
 
 def pfx_auth(self):
     """Handles the authentication using a PFX or PEM file"""
@@ -524,9 +518,9 @@ def pfx_auth(self):
     ccache_minikerberos = CCACHE()
     ccache_minikerberos.add_tgt(res.native, encasrep)
     ccache_minikerberos.to_file(log_ccache)
-    self.logger.info(f"Saved TGT to file { log_ccache }")
-    self.logger.info(f"Using Kerberos Cache { log_ccache }")
-    ccache = CCache.loadFile(log_ccache)
+    self.logger.info(f"Saved TGT to file {log_ccache}")
+    self.logger.info(f"Using Kerberos Cache {log_ccache}")
+    ccache = impacket_CCache.loadFile(log_ccache)
     principal = f"krbtgt/{self.domain.upper()}@{self.domain.upper()}"
     creds = ccache.getCredential(principal)
     if creds is not None:
@@ -539,4 +533,4 @@ def pfx_auth(self):
             self.kerberos_login(self.domain, username, "", nthash, "", self.kdcHost, False)
 
     self.logger.info("Successfully authenticated using Certificate")
-    return True
+    return True