Update KerberosTicketTrace to use enum modes by eve0805 · Pull Request #21637 · rapid7/metasploit-framework

eve0805 · 2026-07-02T02:38:02Z

Overview

This PR updates the Kerberos ticket trace configuration introduced in #21466 and revises the follow-up work from #21568 based on review feedback.

Instead of using KerberosTicketTrace as a boolean plus a separate KerberosTicketTraceLevel option, this PR changes KerberosTicketTrace itself into an enum.

Relationship to Previous PRs

Kerberos-trace #21466 introduced the original Kerberos ticket tracing support.
Add Kerberos ticket trace verbosity levels #21568 added KerberosTicketTraceLevel as a follow-up verbosity option.
This PR supersedes Add Kerberos ticket trace verbosity levels #21568 by folding the trace level behavior directly into KerberosTicketTrace.

Changes

Changes KerberosTicketTrace from a boolean to an enum.
Adds the following KerberosTicketTrace modes:
- off: disables Kerberos ticket trace output.
- metadata: prints Kerberos request/response details while redacting binary field contents.
- ticket: prints full ticket/credential contents only, omitting AS-REQ, AS-REP, TGS-REQ, and TGS-REP message details.
- full: prints full Kerberos request/response details and full ticket/credential contents.
Removes KerberosTicketTraceLevel.

Testing

bundle exec rspec spec/lib/msf/core/exploit/remote/kerberos/client_spec.rb
bundle exec rspec spec/lib/rex/proto/kerberos/kerberos_logger_subscriber_spec.rb
bundle exec rspec spec/lib/msf/base/serializer/readable_text_spec.rb
bundle exec rubocop lib/msf/core/exploit/remote/kerberos/client.rb lib/msf/core/exploit/remote/kerberos/service_authenticator/options.rb lib/rex/proto/kerberos/kerberos_logger_subscriber.rb spec/lib/rex/proto/kerberos/kerberos_logger_subscriber_spec.rb

github-actions · 2026-07-02T02:38:11Z

Thanks for your pull request! As part of our landing process, we manually verify that all modules work as expected.

We've added the additional-testing-required label to indicate that additional testing is required before this pull request can be merged.
For maintainers, this means visiting here.

eve0805 · 2026-07-03T01:56:28Z

Live lab validation against Windows Server 2016 AD CS DC (192.168.189.160)

Test commands

./msfconsole
use auxiliary/admin/kerberos/get_ticket
set RHOST 192.168.189.160
set RPORT 88
set DOMAIN MSFLAB.TEST
set USERNAME Administrator
set PASSWORD <pass>

set KerberosTicketTrace full
set KerberosTicketTraceColors red/blu
set ACTION GET_TGT
run

off:

msf auxiliary(admin/kerberos/get_ticket) > set KerberosTicketTrace off
KerberosTicketTrace => off
msf auxiliary(admin/kerberos/get_ticket) > run
[*] Running module against 192.168.189.160
[*] 192.168.189.160:88 - Getting TGT for Administrator@MSFLAB.TEST
[+] 192.168.189.160:88 - Received a valid TGT-Response
[*] 192.168.189.160:88 - TGT MIT Credential Cache ticket saved to /home/cyan/.msf4/loot/20260703094615_default_192.168.189.160_mit.kerberos.cca_339220.bin
[*] Auxiliary module execution completed
msf auxiliary(admin/kerberos/get_ticket) >

metadata:

msf auxiliary(admin/kerberos/get_ticket) > set KerberosTicketTrace metadata
KerberosTicketTrace => metadata
msf auxiliary(admin/kerberos/get_ticket) > run
[*] Running module against 192.168.189.160
[*] 192.168.189.160:88 - Getting TGT for Administrator@MSFLAB.TEST
####################
# Kerberos Request: AS-REQ
####################
Protocol Version: 5
Message Type: 10 (AS-REQ)
Pre-Authentication Data:
  Entry[0]:
    Type: 128 (PA_PAC_REQUEST)
    Value: [binary 7 bytes]
Request Body:
  KDC Options:
    Value: 1082195984
    Flags:
      - FORWARDABLE
      - RENEWABLE
      - CANONICALIZE
      - RENEWABLE_OK
  Client Name:
    Name Type: 1 (NT_PRINCIPAL)
    Name String:
      - Administrator
  Realm: MSFLAB.TEST
  Server Name:
    Name Type: 1 (NT_PRINCIPAL)
    Name String:
      - krbtgt
      - MSFLAB.TEST
  Till: 2026-07-04T01:46:46Z
  Rtime: 2026-07-04T01:46:46Z
  Nonce: 3158399
  Encryption Type:
    - 18 (AES256)
    - 17 (AES128)
    - 23 (RC4_HMAC)
    - 3 (DES_CBC_MD5)
    - 16 (DES3_CBC_SHA1)
####################
# Kerberos Response: KRB-ERROR
####################
Protocol Version: 5
Message Type: 30 (KRB-ERROR)
Server Time: 2026-07-03T01:46:48Z
Server Microseconds: 488005
Error Code:
  Name: KDC_ERR_PREAUTH_REQUIRED
  Value: 25
  Description: Additional pre-authentication required
Realm: MSFLAB.TEST
Server Name:
  Name Type: 1 (NT_PRINCIPAL)
  Name String:
    - krbtgt
    - MSFLAB.TEST
Error Data: [binary 90 bytes]
####################
# Kerberos Request: AS-REQ
####################
Protocol Version: 5
Message Type: 10 (AS-REQ)
Pre-Authentication Data:
  Entry[0]:
    Type: 2 (PA_ENC_TIMESTAMP)
    Value: [binary 67 bytes]
  Entry[1]:
    Type: 128 (PA_PAC_REQUEST)
    Value: [binary 7 bytes]
Request Body:
  KDC Options: 1350565888
  Client Name:
    Name Type: 1 (NT_PRINCIPAL)
    Name String:
      - Administrator
  Realm: MSFLAB.TEST
  Server Name:
    Name Type: 1 (NT_PRINCIPAL)
    Name String:
      - krbtgt
      - MSFLAB.TEST
  Till: 2026-07-04T01:46:46Z
  Rtime: 2026-07-04T01:46:46Z
  Nonce: 6611207
  Encryption Type:
    - 18 (AES256)
    - 23 (RC4_HMAC)
####################
# Kerberos Response: AS-REP
####################
Protocol Version: 5
Message Type: 11 (AS-REP)
Pre-Authentication Data:
  Entry[0]:
    Type: 19 (PA_ETYPE_INFO2)
    Value: [binary 37 bytes]
Client Realm: MSFLAB.TEST
Client Name:
  Name Type: 1 (NT_PRINCIPAL)
  Name String:
    - Administrator
Ticket:
  Ticket Version Number: 5
  Realm: MSFLAB.TEST
  Server Name:
    Name Type: 1 (NT_PRINCIPAL)
    Name String:
      - krbtgt
      - MSFLAB.TEST
  Encrypted Part:
    Encryption Type: 18 (AES256)
    Key Version Number: 2
    Cipher: [binary 1013 bytes]
Encrypted Part:
  Encryption Type: 18 (AES256)
  Key Version Number: 4
  Cipher: [binary 269 bytes]
[+] 192.168.189.160:88 - Received a valid TGT-Response
[*] 192.168.189.160:88 - TGT MIT Credential Cache ticket saved to /home/cyan/.msf4/loot/20260703094646_default_192.168.189.160_mit.kerberos.cca_403701.bin
####################
# Kerberos Credential: TGT
####################
Creds: 1
  Credential[0]:
    Server: krbtgt/MSFLAB.TEST@MSFLAB.TEST
    Client: Administrator@MSFLAB.TEST
    Ticket etype: 18 (AES256)
    Subkey: false
    Ticket Length: 1101
    Ticket Flags: 0x50e10000 (FORWARDABLE, PROXIABLE, RENEWABLE, INITIAL, PRE_AUTHENT, CANONICALIZE)
    Addresses: 0
    Authdatas: 0
    Times:
      Auth time: 2026-07-03 09:46:48 +0800
      Start time: 2026-07-03 09:46:48 +0800
      End time: 2026-07-03 19:46:48 +0800
      Renew Till: 2026-07-04 09:46:46 +0800
[*] Auxiliary module execution completed

ticket:

msf auxiliary(admin/kerberos/get_ticket) > set KerberosTicketTrace ticket
KerberosTicketTrace => ticket
msf auxiliary(admin/kerberos/get_ticket) > run
[*] Running module against 192.168.189.160
[*] 192.168.189.160:88 - Getting TGT for Administrator@MSFLAB.TEST
[+] 192.168.189.160:88 - Received a valid TGT-Response
[*] 192.168.189.160:88 - TGT MIT Credential Cache ticket saved to /home/cyan/.msf4/loot/20260703094720_default_192.168.189.160_mit.kerberos.cca_907968.bin
####################
# Kerberos Credential: TGT
####################
Creds: 1
  Credential[0]:
    Server: krbtgt/MSFLAB.TEST@MSFLAB.TEST
    Client: Administrator@MSFLAB.TEST
    Ticket etype: 18 (AES256)
    Key: fb621a7382f99690851298dd8cb01c7ce156f354d9ef4a9b6de4760a9b08c9e2
    Subkey: false
    Ticket Length: 1101
    Ticket Flags: 0x50e10000 (FORWARDABLE, PROXIABLE, RENEWABLE, INITIAL, PRE_AUTHENT, CANONICALIZE)
    Addresses: 0
    Authdatas: 0
    Times:
      Auth time: 2026-07-03 09:47:22 +0800
      Start time: 2026-07-03 09:47:22 +0800
      End time: 2026-07-03 19:47:22 +0800
      Renew Till: 2026-07-04 09:47:20 +0800
    Ticket:
      Ticket Version Number: 5
      Realm: MSFLAB.TEST
      Server Name: krbtgt/MSFLAB.TEST
      Encrypted Ticket Part:
        Ticket etype: 18 (AES256)
        Key Version Number: 2
        Cipher:
          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
[*] Auxiliary module execution completed
msf auxiliary(admin/kerberos/get_ticket) >

full:

msf auxiliary(admin/kerberos/get_ticket) > run
[*] Running module against 192.168.189.160
[*] 192.168.189.160:88 - Getting TGT for Administrator@MSFLAB.TEST
####################
# Kerberos Request: AS-REQ
####################
Protocol Version: 5
Message Type: 10 (AS-REQ)
Pre-Authentication Data:
  Entry[0]:
    Type: 128 (PA_PAC_REQUEST)
    Value: [binary 7 bytes: 3005a0030101ff]
Request Body:
  KDC Options:
    Value: 1082195984
    Flags:
      - FORWARDABLE
      - RENEWABLE
      - CANONICALIZE
      - RENEWABLE_OK
  Client Name:
    Name Type: 1 (NT_PRINCIPAL)
    Name String:
      - Administrator
  Realm: MSFLAB.TEST
  Server Name:
    Name Type: 1 (NT_PRINCIPAL)
    Name String:
      - krbtgt
      - MSFLAB.TEST
  Till: 2026-07-04T01:44:46Z
  Rtime: 2026-07-04T01:44:46Z
  Nonce: 2004672
  Encryption Type:
    - 18 (AES256)
    - 17 (AES128)
    - 23 (RC4_HMAC)
    - 3 (DES_CBC_MD5)
    - 16 (DES3_CBC_SHA1)
####################
# Kerberos Response: KRB-ERROR
####################
Protocol Version: 5
Message Type: 30 (KRB-ERROR)
Server Time: 2026-07-03T01:44:48Z
Server Microseconds: 269187
Error Code:
  Name: KDC_ERR_PREAUTH_REQUIRED
  Value: 25
  Description: Additional pre-authentication required
Realm: MSFLAB.TEST
Server Name:
  Name Type: 1 (NT_PRINCIPAL)
  Name String:
    - krbtgt
    - MSFLAB.TEST
Error Data: [binary 90 bytes: 30583035a103020113a22e042c302a3021a003020112a11a1b184d53464c41422e5445535441646d696e6973747261746f723005a0030201173009a103020102a20204003009a103020110a20204003009a10302010fa2020400]
####################
# Kerberos Request: AS-REQ
####################
Protocol Version: 5
Message Type: 10 (AS-REQ)
Pre-Authentication Data:
  Entry[0]:
    Type: 2 (PA_ENC_TIMESTAMP)
    Value: [binary 67 bytes: 3041a003020112a23a0438ef51d095b0db297e9b052bb2133a73a12522d542a4288a513039f2a852502c50f88d9cc947f9a853883f31d30b9099c7630cdee2d280b8a5]
  Entry[1]:
    Type: 128 (PA_PAC_REQUEST)
    Value: [binary 7 bytes: 3005a0030101ff]
Request Body:
  KDC Options: 1350565888
  Client Name:
    Name Type: 1 (NT_PRINCIPAL)
    Name String:
      - Administrator
  Realm: MSFLAB.TEST
  Server Name:
    Name Type: 1 (NT_PRINCIPAL)
    Name String:
      - krbtgt
      - MSFLAB.TEST
  Till: 2026-07-04T01:44:46Z
  Rtime: 2026-07-04T01:44:46Z
  Nonce: 11259415
  Encryption Type:
    - 18 (AES256)
    - 23 (RC4_HMAC)
####################
# Kerberos Response: AS-REP
####################
Protocol Version: 5
Message Type: 11 (AS-REP)
Pre-Authentication Data:
  Entry[0]:
    Type: 19 (PA_ETYPE_INFO2)
    Value: [binary 37 bytes: 30233021a003020112a11a1b184d53464c41422e5445535441646d696e6973747261746f72]
Client Realm: MSFLAB.TEST
Client Name:
  Name Type: 1 (NT_PRINCIPAL)
  Name String:
    - Administrator
Ticket:
  Ticket Version Number: 5
  Realm: MSFLAB.TEST
  Server Name:
    Name Type: 1 (NT_PRINCIPAL)
    Name String:
      - krbtgt
      - MSFLAB.TEST
  Encrypted Part:
    Encryption Type: 18 (AES256)
    Key Version Number: 2
    Cipher: [binary 1013 bytes: fbc4b2bb1e460e1be702b13284b2dfb8836ef809e0ee1f29e174532c63627a45752fd1b1423babaab3d61b5674cd6e509a1be49e03a87486e6dd2e9d606acd5766d2a7cda21d13cc004c6ccc6756f002c33243488156042f02d4b5805f6b349f302f35fc37c5feb76aa0121f646102660b3ada09c38f89d992491b64f204bda19d03f02718f68eef13d0f08de75ba7c96f8c32b0be0abaf0e89393e92cac11a40de62368a7c8ac3d6aa36a3aa68f700cf4407e7e7522b8b0c3cf7bf88833f04ea9f383418612017cd0ebe6becc7f28af47bfa30ea4316ac4e37774f3bc35d01611a7d322396be2fb3f506ccdc34d034a22bb3784ab317c3133a99d82c44413e9e770b28e3023435f46f603c7286d6be2b1f1ec56b586f7c0537fea8751fc4bdd4deafd0380f6dc4f85e28fea58b0ad3ec105561d210a2c50bca156c226b5a31bbfd9f8d5911361a8d755839aeeefa10ae831c6c7865013bc43eb0579c0e7d790c036456faddca95eba09b517131b7be3b09aee33b1222308310f4bfc3fafc677aa8e2b2350aa00b363cd8efcb444a1f3b6759fea9e6be8d01edbcf479e5553aa12563cd571b41a27111a45e1a63e2b47bb78bccbfa72baf1765986598c50bf6fae5cded9a5fd73f19bf3c5b9cc8095a450ec4c540903d496348c450e1a556025ff6ea9e3ab0bb5f864be4af634ddec5aabf1e8b4bf7480985b988f5290034c8831a9eaed7f09d105657dc613c06166f1022850c4d7ae5593d7636a366d39b42d66b18565972ca71b10d80bde859699712e7ab03160f6481cd1235af3a71213539d3c15a8327789e5e6db23c778e4436f51009d5dc1626e47cee45f317734b9bf52e108f968bbdab06d47038d6955264995e70069140a1e5c3d134cd595735d9a91d276e206a6ef5f3a65c2ea066783f214c70c23289ea5f60f31a2b3562933abc433729a0168bf37f8ea41067943f4b7d636b3a171800612d29c6e73b0e3f78d2e6b1a0c3092f20994440c1dfb8880bb4db63301e444d4e67e0d9b9a645d90ca388cd245f11f76ec3b3e49b0b40e242fe963a03445051a64cfae0887e0f82a26c37a426d87342da9a988ab9e1d66bd0071111c4ac786f77f4a9b2019b5feadc1eb102559ab67cb86db710eeb421c1438d70c42ab57a6bb18099dbdab71ee2d58c31ce0fdfdf6d069c50b1c664e4041571c90738a1c4043385b191a78bbae1d926a04d94af80cf341b65ea2ac61df1bedf36444d4292ea95918e073899d4f5ec4c43224d0c27992fca27f7623d349630ac9fc933d2266c743570a75737a4fa35b16250681c9bab708de126ace3c4841ac2e167532d54dc2b9f20c90dfbedc2f10f873a7f98fa5ad7cf0f568cb7f063f32a9ac7e6d4d90625efb58955e03bfb71298f94a3b78b41a5d9a1f8a0a89f58faa20274c0d31]
Encrypted Part:
  Encryption Type: 18 (AES256)
  Key Version Number: 4
  Cipher: [binary 270 bytes: 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]
[+] 192.168.189.160:88 - Received a valid TGT-Response
[*] 192.168.189.160:88 - TGT MIT Credential Cache ticket saved to /home/cyan/.msf4/loot/20260703094446_default_192.168.189.160_mit.kerberos.cca_786528.bin
####################
# Kerberos Credential: TGT
####################
Creds: 1
  Credential[0]:
    Server: krbtgt/MSFLAB.TEST@MSFLAB.TEST
    Client: Administrator@MSFLAB.TEST
    Ticket etype: 18 (AES256)
    Key: a9be7811c6924fbabb797dbf10a131c6bb0ff4f369e2a76847ada652c588c343
    Subkey: false
    Ticket Length: 1101
    Ticket Flags: 0x50e10000 (FORWARDABLE, PROXIABLE, RENEWABLE, INITIAL, PRE_AUTHENT, CANONICALIZE)
    Addresses: 0
    Authdatas: 0
    Times:
      Auth time: 2026-07-03 09:44:48 +0800
      Start time: 2026-07-03 09:44:48 +0800
      End time: 2026-07-03 19:44:48 +0800
      Renew Till: 2026-07-04 09:44:46 +0800
    Ticket:
      Ticket Version Number: 5
      Realm: MSFLAB.TEST
      Server Name: krbtgt/MSFLAB.TEST
      Encrypted Ticket Part:
        Ticket etype: 18 (AES256)
        Key Version Number: 2
        Cipher:
          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

Add Kerberos ticket trace enum modes

6c71818

github-actions Bot added the additional-testing-required label Jul 2, 2026

smcintyre-r7 added this to Metasploit Kanban Jul 2, 2026

github-project-automation Bot moved this to Todo in Metasploit Kanban Jul 2, 2026

eve0805 mentioned this pull request Jul 2, 2026

Add Kerberos ticket trace verbosity levels #21568

Closed

4 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update KerberosTicketTrace to use enum modes#21637

Update KerberosTicketTrace to use enum modes#21637
eve0805 wants to merge 1 commit into
rapid7:masterfrom
eve0805:feature/kerberos-ticket-trace-enum

eve0805 commented Jul 2, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 2, 2026

Uh oh!

eve0805 commented Jul 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

eve0805 commented Jul 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Overview

Relationship to Previous PRs

Changes

Testing

Uh oh!

github-actions Bot commented Jul 2, 2026

Uh oh!

eve0805 commented Jul 3, 2026

Live lab validation against Windows Server 2016 AD CS DC (192.168.189.160)

Test commands

off:

metadata:

ticket:

full:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

eve0805 commented Jul 2, 2026 •

edited

Loading