Ldap on The Manticore Project

Manticore v1.1.5: Bug fixes

Wed, 17 Jun 2026 20:23:02 +0000

Manticore is a Go library of offensive and defensive security primitives maintained by The Manticore Project. This release, v1.1.5, is a maintenance update with no new features: it is a round of bug fixes focused on the LDAP and SMB clients, following the RPC work that landed in v1.1.4. The fixes fall into a few categories.

Pass-the-hash correctness on LDAP and SMB

Two of the fixes correct pass-the-hash, on both the LDAP and the SMB stacks. LDAP pass-the-hash now performs an NTLM hash bind rather than treating the hash as a password (#657), and SMB NTLM authentication now uses the NT hash for the pass-the-hash path (#679). In both cases the supplied hash was not being fed into the right step of the NTLM exchange, so authentication from a harvested hash failed where it should have succeeded. If you authenticate with NT hashes against either protocol, this is the release you want.

Manticore v1.0.8: KeyCredentialLink refactor and cleanup

Wed, 12 Nov 2025 10:07:49 +0000

Manticore is the Go library of offensive and defensive security primitives I maintain for The Manticore Project. It provides the building blocks (Windows structures, cryptography, LDAP and network plumbing) that the project’s tools rely on. Not every release adds a feature; some exist to clean up and tighten the existing code.

v1.0.8 is one of those. There are no new capabilities here. Instead, I spent this release refactoring the KeyCredentialLink and CustomKeyInformation code, tidying up the LDAP DNWithBinary type, tightening error handling, and removing debug output that should never have shipped. This kind of work does not change what the library does, but makes it easier and safer to build on.

Manticore v1.0.7: KeyCredential refactor and BCrypt ECC keys

Tue, 11 Nov 2025 12:21:19 +0000

Manticore is The Manticore Project’s Go library of offensive and defensive security primitives. It is the foundation that most of our tools build on, so each release tends to focus on making one or two of those primitives more correct and more pleasant to use. In v1.0.7 I focused on the keycredential package: extending its cryptographic key support, tidying up its internal structure, and aligning one piece of its API with the naming conventions used across the rest of the library.

Manticore v1.0.3: Parts of SMBv1 and minor fixes

Tue, 28 Oct 2025 16:12:47 +0000

Manticore is the Go library of offensive and defensive security primitives that powers the tools of The Manticore Project. It provides the building blocks (protocol structures, Active Directory abstractions, cryptographic helpers) that the individual tools rely on so that each tool does not have to reimplement the same plumbing.

This release, v1.0.3, is a mix of new groundwork and small corrections. The headline is the start of SMB v1.0 support, but most of the work here is about tightening interfaces that already existed and adding the project governance documents that the repository was missing. None of these changes are large on their own; together they make the library a little more correct and a little easier to contribute to.

Active Directory - Auditing and managing Kerberos delegations with Delegations

Mon, 02 Jun 2025 10:00:00 +0000

During security assessments of Active Directory environments, one of the first things I look at is Kerberos delegations. Misconfigured delegations are a well-known attack vector: an attacker who compromises a service account with unconstrained delegation can impersonate any user who authenticates to that service. Constrained delegations and resource-based constrained delegations (RBCD) are safer, but they still require careful configuration.

The problem is that existing tools often only cover one side of the coin: they can find delegations, but not modify them. Or they can set up RBCD for exploitation, but not audit the full picture. I wanted a single tool that could audit, find, add, remove, clear, and monitor all three types of Kerberos delegations from a single binary, on any platform.

Manticore v1.0.2: NBTNS and LDAP improvements

Sat, 31 May 2025 13:34:12 +0000

Manticore is the Go library of offensive and defensive security primitives that powers the tools built by The Manticore Project. It provides the building blocks (network protocol implementations, Active Directory helpers, cryptography, and parsing routines) that the higher-level tools rely on.

This release, v1.0.2, is a small but meaningful one. It focuses on two areas: a correctness fix in the NBTNS (NetBIOS Name Service) protocol implementation, and a round of improvements to the LDAP functions. It is also the first release to include a contribution from outside the core team.

Manticore v1.0.1: UUID and LDAP improvements

Wed, 21 May 2025 08:39:52 +0000

Manticore is the Go library of offensive and defensive security primitives that underpins the tools built by The Manticore Project. This v1.0.1 release is a round of minor improvements: no new tool, no breaking change, just rounding out two areas of the library that the tools lean on the most. In this release I focused on the UUID package and the LDAP package.

UUID generation

Identifiers turn up everywhere in security tooling. Active Directory objects, RPC interface bindings, and many Windows structures are addressed by UUIDs, and when you build or test against those systems you frequently need to generate identifiers of a specific version rather than just a random one. A library that only produces UUID v4 leaves you reaching for handwritten byte-twiddling whenever a particular version is required.