[NSE] New script krb5-enum-users

[Patrik Karlsson <patrik () cqure net>]

Hi all,

I've added a new script called krb5-enum-users that does user enumeration
over Kerberos:

The script discovers valid usernames by querying the Kerberos service for a
TGT.
When an invalid username is requested the server will responde using the
Kerberos error code KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN, allowing us to
determine
that the user name was invalid. Valid user names will illicit either the
TGT in a AS-REP response or the error KRB5KDC_ERR_PREAUTH_REQUIRED,
signaling
that the user is required to perform pre authentication.

Cheers,
Patrik
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/