Bugfix on The Manticore Project

Manticore v1.1.5: Bug fixes

Wed, 17 Jun 2026 20:23:02 +0000

Manticore is a Go library of offensive and defensive security primitives maintained by The Manticore Project. This release, v1.1.5, is a maintenance update with no new features: it is a round of bug fixes focused on the LDAP and SMB clients, following the RPC work that landed in v1.1.4. The fixes fall into a few categories.

Pass-the-hash correctness on LDAP and SMB

Two of the fixes correct pass-the-hash, on both the LDAP and the SMB stacks. LDAP pass-the-hash now performs an NTLM hash bind rather than treating the hash as a password (#657), and SMB NTLM authentication now uses the NT hash for the pass-the-hash path (#679). In both cases the supplied hash was not being fed into the right step of the NTLM exchange, so authentication from a harvested hash failed where it should have succeeded. If you authenticate with NT hashes against either protocol, this is the release you want.

Manticore v1.1.3: Fix ms_rrp enumeration

Tue, 16 Jun 2026 08:59:36 +0000

Manticore is a Go library of offensive and defensive security primitives maintained by The Manticore Project. This release, v1.1.3, is a small patch that continues the Remote Registry line of work from v1.1.1 and v1.1.2. It carries a single, focused fix: the MS-RRP enumeration corrections are restored after being lost from main.

Restoring the ms_rrp enumeration fixes

During the merges that followed the v1.1.1 Windows REG file parser and the v1.1.2 NDR marshaling fix, a pair of corrections to the MS-RRP (ms_rrp) enumeration path were inadvertently dropped from the main branch. This release restores them (#612, #614) in a single change (Restore ms_rrp enumeration fixes lost from main).

Manticore v1.1.2: Registry-related fixes

Tue, 16 Jun 2026 07:27:22 +0000

Manticore is a Go library of offensive and defensive security primitives maintained by The Manticore Project. This release, v1.1.2, is a small patch that continues the Remote Registry and registry work started in v1.1.1. It contains a single, focused fix to how RPC_SECURITY_DESCRIPTOR is marshaled over NDR.

RPC_SECURITY_DESCRIPTOR marshaling

The fix corrects RPC_SECURITY_DESCRIPTOR marshaling when its size_is and length_is bounds are independent (#618). In NDR, a security descriptor is carried as a conformant-varying array of bytes: the buffer’s allocated capacity is described by size_is (the conformance count) and the number of bytes actually present is described by length_is (the variance count). These two values are not always equal, since a caller can allocate a larger buffer than it fills.

Manticore v1.0.4: Minor bug fixes on Windows KeyCredential time functions

Wed, 29 Oct 2025 10:58:34 +0000

Manticore is the Go library of offensive and defensive security primitives that underpins the tools of The Manticore Project. This release, v1.0.4, is a small maintenance update: there are no new features, just a focused round of bug fixes in the Windows KeyCredential time handling.

KeyCredential time functions

KeyCredential blobs (the msDS-KeyCredentialLink attribute used by Windows Hello for Business and shadow-credentials tooling) carry timestamps such as the key creation and last-update times. Getting these conversions right matters, since an off-by-one or misencoded timestamp can produce a blob that the directory rejects, or one that misrepresents when a key was created.