CVS commit: pkgsrc/net/py-impacket

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/net/py-impacket
From: "Adam Ciarcinski" <adam%netbsd.org@localhost>
Date: Mon, 25 May 2026 08:04:47 +0000

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon May 25 08:04:47 UTC 2026

Modified Files:
        pkgsrc/net/py-impacket: Makefile PLIST distinfo

Log Message:
py-impacket: updated to 0.13.1

Impacket v0.13.1 (May 2026):

1. Library improvements

    * SMB: Improved server and relay behavior with SMB server signing support, optional read-only shares, Kerberos/NTLM authentication controls, graceful SMB relay packet handling, SMBv1 relay fixes, 
SMB 3.1.1 negotiation fixes, and clearer errors for truncated SMB responses.
    * Kerberos: Fixed S4U2Self service ticket parsing, non-ASCII authentication encoding, LSA Kerberos key decryption, GSSAPI BER length parsing, ccache/kirbi conversion edge cases, and PAC 
preservation/signing helpers used by ticket tooling.
    * MSSQL/TDS: Added TDS 8.0 support for Force Strict Encryption targets, EPA channel binding handling, TDS_SSVARIANT parsing, stricter TLS-backed packet handling, workstation/application name 
support, and more reliable SQL reply error tracking.
    * DCE/RPC and WMI: Added WMI PutClass/DeleteClass support, Remote Event Log subscription calls, Remote Desktop Services process parsing fixes, SCMR failure action marshaling fixes, and safer TCP 
transport handling on empty receives.
    * Directory and data parsing: Added LDAP CRUD helpers, improved LDAP attribute handling, fixed large-page ESE tag parsing for Windows Server 2025 NTDS.dit files, improved NTFS sparse and 
INDEX_ROOT reads, fixed DPAPI_BLOB parsing with oversized input, and corrected high-codepoint unicode structure sizing.
    * Added a reusable ACL helper module and expanded regression coverage for ACLs, NTFS, TDS, Kerberos, ESE, SCMR, WMI, SMB, and packet parsing.

2. Examples improvements

    * [ntlmrelayx.py](examples/ntlmrelayx.py):
        * Added MSSQL and RDP relay servers, strict MSSQL relay support, TLS-backed TDS frame reassembly, NTLM sign/seal removal paths for CVE-2025-33073-related relay workflows, and `--remove-mic` 
handling.
        * Improved WinRM relay error handling and NTLMv2 detection, fixed WinRM NTLM relay behavior, made SMB relay negotiation more conservative by avoiding unsupported NEGOEX advertisement, and 
added multibyte AD CS template name support.
        * Added shadow credentials commands to the interactive LDAP shell and updated KeyCreds handling for the January 2026 Windows changes.
    * [secretsdump.py](examples/secretsdump.py):
        * Added SAM history parsing, improved offline machine account and Kerberos key recovery, fixed negative timestamps on Windows, added SAM password timestamp output, and filtered offline NTDS 
rows by local domain SID.
    * [regsecrets.py](examples/regsecrets.py):
        * Added SAM history parsing.
    * [ticketer.py](examples/ticketer.py):
        * Improved ccache handling and preserved KDC-issued lifetimes for diamond tickets.
    * [ticketConverter.py](examples/ticketConverter.py):
        * Improved kirbi/ccache conversion, preserved ticket flags, converted all TGS entries, and added base64 output support.
    * [describeTicket.py](examples/describeTicket.py):
        * Fixed credential indexing after skipped decrypts and improved Kerberoast debug output.
    * [raiseChild.py](examples/raiseChild.py):
        * Preserved PAC buffers, added AES support for modern Windows environments, and improved ticket retry behavior.
    * [smbclient.py](examples/smbclient.py):
        * Added ACL management support, recursive `rget`, and richer share listing output with type and comments.
    * [mssqlclient.py](examples/mssqlclient.py):
        * Added workstation/application name options, linked-server RPC enable/disable commands, custom CBT support, and better MSSQL shell behavior.
    * [ntfs-read.py](examples/ntfs-read.py):
        * Improved INDEX_ROOT file listing, sparse file support, error handling, and read correctness.
    * [tstool.py](examples/tstool.py):
        * Added Remote Desktop Shadowing support.
    * [badsuccessor.py](examples/badsuccessor.py):
        * Fixed ACE filtering and ObjectType GUID parsing that could cause false negatives when searching OUs.
    * [GetUserSPNs.py](examples/GetUserSPNs.py):
        * Added an option to avoid forcing RC4-HMAC when requesting a TGT.
    * [owneredit.py](examples/owneredit.py):
        * Improved distinguished name lookup behavior.
    * [exchanger.py](examples/exchanger.py):
        * Added Basic Authentication support.
    * [reg.py](examples/reg.py):
        * Added support for persistent registry key creation.

3. New examples

    * [dpapidump.py](examples/dpapidump.py) dumps DPAPI-related secrets.
    * [checkMSSQLStatus.py](examples/checkMSSQLStatus.py) checks MSSQL status and CBT behavior.

4. Project & packaging

    * Removed the run-time dependency on setuptools.
    * Removed remaining Python 2 compatibility code from WMI and ESE modules.


To generate a diff of this commit:
cvs rdiff -u -r1.16 -r1.17 pkgsrc/net/py-impacket/Makefile
cvs rdiff -u -r1.12 -r1.13 pkgsrc/net/py-impacket/PLIST
cvs rdiff -u -r1.10 -r1.11 pkgsrc/net/py-impacket/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/py-impacket/Makefile
diff -u pkgsrc/net/py-impacket/Makefile:1.16 pkgsrc/net/py-impacket/Makefile:1.17
--- pkgsrc/net/py-impacket/Makefile:1.16        Tue Nov 11 14:09:00 2025
+++ pkgsrc/net/py-impacket/Makefile     Mon May 25 08:04:47 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.16 2025/11/11 14:09:00 adam Exp $
+# $NetBSD: Makefile,v 1.17 2026/05/25 08:04:47 adam Exp $
 
-DISTNAME=      impacket-0.13.0
+DISTNAME=      impacket-0.13.1
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    net python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=i/impacket/}
@@ -45,6 +45,7 @@ SUBST_FILES.crypto+=  impacket/krb5/crypt
 SUBST_FILES.crypto+=   impacket/krb5/gssapi.py
 SUBST_FILES.crypto+=   impacket/ntlm.py
 SUBST_FILES.crypto+=   impacket/smb3.py
+SUBST_FILES.crypto+=   impacket/spnego.py
 SUBST_FILES.crypto+=   tests/SMB_RPC/test_ntlm.py
 SUBST_FILES.crypto+=   tests/dcerpc/test_mimilib.py
 SUBST_FILES.crypto+=   tests/dcerpc/test_nrpc.py
@@ -53,15 +54,17 @@ SUBST_FILES.crypto+=        tests/misc/test_dpa
 SUBST_SED.crypto=      -e 's,Cryptodome,Crypto,'
 
 post-install:
-.for bin in DumpNTLMInfo Get-GPPPassword GetADComputers GetADUsers GetLAPSPassword GetNPUsers \
-       GetUserSPNs addcomputer atexec changepasswd dacledit dcomexec describeTicket dpapi \
-       esentutl exchanger findDelegation getArch getPac getST getTGT \
-       goldenPac karmaSMB keylistattack kintercept lookupsid machine_role mimikatz mqtt_check \
-       mssqlclient mssqlinstance net netview nmapAnswerMachine ntfs-read ntlmrelayx owneredit \
-       ping ping6 \
-       psexec raiseChild rbcd rdp_check reg registry-read rpcdump rpcmap sambaPipe samrdump \
-       secretsdump services smbclient smbexec smbpasswd smbrelayx smbserver sniff sniffer \
-       split ticketConverter ticketer tstool wmiexec wmipersist wmiquery
+.for bin in CheckLDAPStatus DumpNTLMInfo Get-GPPPassword GetADComputers GetADUsers \
+       GetLAPSPassword GetNPUsers GetUserSPNs addcomputer atexec attrib \
+       badsuccessor changepasswd checkMSSQLStatus dacledit dcomexec \
+       describeTicket dpapi dpapidump esentutl exchanger filetime findDelegation \
+       getArch getPac getST getTGT goldenPac karmaSMB keylistattack kintercept \
+       lookupsid machine_role mimikatz mqtt_check mssqlclient mssqlinstance net \
+       netview nmapAnswerMachine ntfs-read ntlmrelayx owneredit ping ping6 \
+       psexec raiseChild rbcd rdp_check reg registry-read regsecrets rpcdump \
+       rpcmap sambaPipe samedit samrdump secretsdump services smbclient smbexec \
+       smbpasswd smbrelayx smbserver sniff sniffer split ticketConverter \
+       ticketer tstool wmiexec wmipersist wmiquery
        cd ${DESTDIR}${PREFIX}/bin && \
        ${MV} ${bin}.py ${bin}-${PYVERSSUFFIX}.py || ${TRUE}
 .endfor

Index: pkgsrc/net/py-impacket/PLIST
diff -u pkgsrc/net/py-impacket/PLIST:1.12 pkgsrc/net/py-impacket/PLIST:1.13
--- pkgsrc/net/py-impacket/PLIST:1.12   Tue Nov 11 14:09:00 2025
+++ pkgsrc/net/py-impacket/PLIST        Mon May 25 08:04:47 2026
@@ -1,5 +1,5 @@
-@comment $NetBSD: PLIST,v 1.12 2025/11/11 14:09:00 adam Exp $
-bin/CheckLDAPStatus.py
+@comment $NetBSD: PLIST,v 1.13 2026/05/25 08:04:47 adam Exp $
+bin/CheckLDAPStatus-${PYVERSSUFFIX}.py
 bin/DumpNTLMInfo-${PYVERSSUFFIX}.py
 bin/Get-GPPPassword-${PYVERSSUFFIX}.py
 bin/GetADComputers-${PYVERSSUFFIX}.py
@@ -9,16 +9,18 @@ bin/GetNPUsers-${PYVERSSUFFIX}.py
 bin/GetUserSPNs-${PYVERSSUFFIX}.py
 bin/addcomputer-${PYVERSSUFFIX}.py
 bin/atexec-${PYVERSSUFFIX}.py
-bin/attrib.py
-bin/badsuccessor.py
+bin/attrib-${PYVERSSUFFIX}.py
+bin/badsuccessor-${PYVERSSUFFIX}.py
 bin/changepasswd-${PYVERSSUFFIX}.py
+bin/checkMSSQLStatus-3.14.py
 bin/dacledit-${PYVERSSUFFIX}.py
 bin/dcomexec-${PYVERSSUFFIX}.py
 bin/describeTicket-${PYVERSSUFFIX}.py
 bin/dpapi-${PYVERSSUFFIX}.py
+bin/dpapidump-${PYVERSSUFFIX}.py
 bin/esentutl-${PYVERSSUFFIX}.py
 bin/exchanger-${PYVERSSUFFIX}.py
-bin/filetime.py
+bin/filetime-${PYVERSSUFFIX}.py
 bin/findDelegation-${PYVERSSUFFIX}.py
 bin/getArch-${PYVERSSUFFIX}.py
 bin/getPac-${PYVERSSUFFIX}.py
@@ -47,11 +49,11 @@ bin/rbcd-${PYVERSSUFFIX}.py
 bin/rdp_check-${PYVERSSUFFIX}.py
 bin/reg-${PYVERSSUFFIX}.py
 bin/registry-read-${PYVERSSUFFIX}.py
-bin/regsecrets.py
+bin/regsecrets-${PYVERSSUFFIX}.py
 bin/rpcdump-${PYVERSSUFFIX}.py
 bin/rpcmap-${PYVERSSUFFIX}.py
 bin/sambaPipe-${PYVERSSUFFIX}.py
-bin/samedit.py
+bin/samedit-${PYVERSSUFFIX}.py
 bin/samrdump-${PYVERSSUFFIX}.py
 bin/secretsdump-${PYVERSSUFFIX}.py
 bin/services-${PYVERSSUFFIX}.py
@@ -102,6 +104,9 @@ ${PYSITELIB}/impacket/NDP.pyo
 ${PYSITELIB}/impacket/__init__.py
 ${PYSITELIB}/impacket/__init__.pyc
 ${PYSITELIB}/impacket/__init__.pyo
+${PYSITELIB}/impacket/acl.py
+${PYSITELIB}/impacket/acl.pyc
+${PYSITELIB}/impacket/acl.pyo
 ${PYSITELIB}/impacket/cdp.py
 ${PYSITELIB}/impacket/cdp.pyc
 ${PYSITELIB}/impacket/cdp.pyo
@@ -348,9 +353,15 @@ ${PYSITELIB}/impacket/examples/ntlmrelay
 ${PYSITELIB}/impacket/examples/ntlmrelayx/servers/httprelayserver.py
 ${PYSITELIB}/impacket/examples/ntlmrelayx/servers/httprelayserver.pyc
 ${PYSITELIB}/impacket/examples/ntlmrelayx/servers/httprelayserver.pyo
+${PYSITELIB}/impacket/examples/ntlmrelayx/servers/mssqlrelayserver.py
+${PYSITELIB}/impacket/examples/ntlmrelayx/servers/mssqlrelayserver.pyc
+${PYSITELIB}/impacket/examples/ntlmrelayx/servers/mssqlrelayserver.pyo
 ${PYSITELIB}/impacket/examples/ntlmrelayx/servers/rawrelayserver.py
 ${PYSITELIB}/impacket/examples/ntlmrelayx/servers/rawrelayserver.pyc
 ${PYSITELIB}/impacket/examples/ntlmrelayx/servers/rawrelayserver.pyo
+${PYSITELIB}/impacket/examples/ntlmrelayx/servers/rdprelayserver.py
+${PYSITELIB}/impacket/examples/ntlmrelayx/servers/rdprelayserver.pyc
+${PYSITELIB}/impacket/examples/ntlmrelayx/servers/rdprelayserver.pyo
 ${PYSITELIB}/impacket/examples/ntlmrelayx/servers/rpcrelayserver.py
 ${PYSITELIB}/impacket/examples/ntlmrelayx/servers/rpcrelayserver.pyc
 ${PYSITELIB}/impacket/examples/ntlmrelayx/servers/rpcrelayserver.pyo
@@ -411,6 +422,9 @@ ${PYSITELIB}/impacket/examples/ntlmrelay
 ${PYSITELIB}/impacket/examples/ntlmrelayx/utils/identity_log.py
 ${PYSITELIB}/impacket/examples/ntlmrelayx/utils/identity_log.pyc
 ${PYSITELIB}/impacket/examples/ntlmrelayx/utils/identity_log.pyo
+${PYSITELIB}/impacket/examples/ntlmrelayx/utils/rdp_ssl.py
+${PYSITELIB}/impacket/examples/ntlmrelayx/utils/rdp_ssl.pyc
+${PYSITELIB}/impacket/examples/ntlmrelayx/utils/rdp_ssl.pyo
 ${PYSITELIB}/impacket/examples/ntlmrelayx/utils/shadow_credentials.py
 ${PYSITELIB}/impacket/examples/ntlmrelayx/utils/shadow_credentials.pyc
 ${PYSITELIB}/impacket/examples/ntlmrelayx/utils/shadow_credentials.pyo

Index: pkgsrc/net/py-impacket/distinfo
diff -u pkgsrc/net/py-impacket/distinfo:1.10 pkgsrc/net/py-impacket/distinfo:1.11
--- pkgsrc/net/py-impacket/distinfo:1.10        Tue Nov 11 14:09:00 2025
+++ pkgsrc/net/py-impacket/distinfo     Mon May 25 08:04:47 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.10 2025/11/11 14:09:00 adam Exp $
+$NetBSD: distinfo,v 1.11 2026/05/25 08:04:47 adam Exp $
 
-BLAKE2s (impacket-0.13.0.tar.gz) = c9f08e01bdf4114338e15b87d49196d4dffe5451e4051fcf32da2c9382c273ba
-SHA512 (impacket-0.13.0.tar.gz) = a02324d4b3370f501a9f3cd24704eaf04ce17e5c01fe843ce5199d053186003e4c2dd5e4cd1674c1313c8c9ef3fd8738f2d8cc4351a97b1d3deb2d658102b182
-Size (impacket-0.13.0.tar.gz) = 1664694 bytes
+BLAKE2s (impacket-0.13.1.tar.gz) = b4a7eaa1e0cdc91868db6171f03b2f54309e2f24b21d0c22efe05c27548f87a7
+SHA512 (impacket-0.13.1.tar.gz) = 6f5e398d07b9a677c90bb420b5e3d2e7c62ab4ab42f429eb618334632919701671e17d06bf55815f3d5da90dfa3c579abe4e3946c73c6017b5e3332e3cdb8183
+Size (impacket-0.13.1.tar.gz) = 1737704 bytes
 SHA1 (patch-setup.py) = 5b7785ce39692150a0e6eb722ff4e2f710e1f9b2

Prev by Date: CVS commit: pkgsrc/doc
Next by Date: CVS commit: pkgsrc/devel/py-testfixtures
Previous by Thread: CVS commit: pkgsrc/doc
Next by Thread: CVS commit: pkgsrc/devel/py-testfixtures
Indexes:

Home | Main Index | Thread Index | Old Index