Back to all articles

Manticore v1.0.4: Minor bug fixes on Windows KeyCredential time functions

October 29, 2025 By Remi GASCOU (Podalirius)

Manticore is the Go library of offensive and defensive security primitives that underpins the tools of The Manticore Project. This release, v1.0.4, is a small maintenance update: there are no new features, just a focused round of bug fixes in the Windows KeyCredential time handling.

KeyCredential time functions

KeyCredential blobs (the msDS-KeyCredentialLink attribute used by Windows Hello for Business and shadow-credentials tooling) carry timestamps such as the key creation and last-update times. Getting these conversions right matters, since an off-by-one or misencoded timestamp can produce a blob that the directory rejects, or one that misrepresents when a key was created.

In v1.0.4 I fixed minor bugs in those time functions in a single change (Improve utils). The fixes correct the timestamp handling for code that builds or parses KeyCredential structures with Manticore.

If you are already on v1.0.3, there are no breaking changes in this release.

References

Manticore is the library behind the project's tooling. Explore the security tools and libraries built on top of it.