Skip to content

Conversation

@NeffIsBack
Copy link
Contributor

With the hack.lu CTF this year and therefore a swedish AD environment it was reported that Kerberos authentication does not work with special chars (e.g. öäü) that are present in some localized environments: Pennyw0rth/NetExec#963

The problem is that kerberos uses utf-8 encoding for Kerberos Strings. However, as of now both minikerberos as well as impacket both use latin1 as its encoding, resulting in failed authentication with users that contain special chars.
See:

A PR to fix the issue in impacket has been opened: fortra/impacket#2068

With both fixes applied, pfx authentication (which uses minikerberos as well as impacket) works as intended now (Before&After):
image

Be aware that i have not tested the kerberos protokoll on its own with minikerberos, but i expect the same result as in impacket (failed auth for usernames with öäü etc in the name)!

@skelsec
Copy link
Owner

skelsec commented Oct 29, 2025

Be aware that i have not tested the kerberos protokoll on its own with minikerberos,
YOLO

@skelsec skelsec merged commit faa7f57 into skelsec:main Oct 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants