Rpc on The Manticore Project

Manticore v1.1.4: RPC improvements

Wed, 17 Jun 2026 10:49:11 +0000

Manticore is the Go library of offensive and defensive security primitives that underpins the tools of The Manticore Project: protocol stacks, cryptography, parsers, and the wire structures you need when you cannot rely on a host’s native client. The v1.1.0 release brought SMB 2.0 and the first DCE/RPC and endpoint-mapper layers; this release builds those out into something you can actually point at a domain.

v1.1.4 is an RPC-focused release. It fills in endpoint-mapper enumeration, teaches the stack to decode protocol towers for every common transport, adds a curated catalog of well-known interfaces, brings authenticated binds with pass-the-hash, and lands the MS-DRSR replication blob structures. The sections below group the work by theme.

Manticore v1.1.3: Fix ms_rrp enumeration

Tue, 16 Jun 2026 08:59:36 +0000

Manticore is a Go library of offensive and defensive security primitives maintained by The Manticore Project. This release, v1.1.3, is a small patch that continues the Remote Registry line of work from v1.1.1 and v1.1.2. It carries a single, focused fix: the MS-RRP enumeration corrections are restored after being lost from main.

Restoring the ms_rrp enumeration fixes

During the merges that followed the v1.1.1 Windows REG file parser and the v1.1.2 NDR marshaling fix, a pair of corrections to the MS-RRP (ms_rrp) enumeration path were inadvertently dropped from the main branch. This release restores them (#612, #614) in a single change (Restore ms_rrp enumeration fixes lost from main).

Manticore v1.1.2: Registry-related fixes

Tue, 16 Jun 2026 07:27:22 +0000

Manticore is a Go library of offensive and defensive security primitives maintained by The Manticore Project. This release, v1.1.2, is a small patch that continues the Remote Registry and registry work started in v1.1.1. It contains a single, focused fix to how RPC_SECURITY_DESCRIPTOR is marshaled over NDR.

RPC_SECURITY_DESCRIPTOR marshaling

The fix corrects RPC_SECURITY_DESCRIPTOR marshaling when its size_is and length_is bounds are independent (#618). In NDR, a security descriptor is carried as a conformant-varying array of bytes: the buffer’s allocated capacity is described by size_is (the conformance count) and the number of bytes actually present is described by length_is (the variance count). These two values are not always equal, since a caller can allocate a larger buffer than it fills.

Manticore v1.1.1: A Windows REG file parser, NDR64, and Remote Registry

Tue, 16 Jun 2026 06:41:06 +0000

Manticore is the Go library of offensive and defensive security primitives that The Manticore Project’s tools are built on: SMB, LDAP, Kerberos, DCE/RPC, and the Windows data types that hold them together. Most of the work in a release like this happens below the surface, in the wire encoders that have to match exactly what a real Windows server expects.

In v1.1.1 I focused on three things: bringing the NDR codec up to NDR64 so DCE/RPC interfaces negotiate the transfer syntax modern Windows servers prefer, landing a new ms_rrp package with a Remote Registry client and a real Windows .reg file parser, and a handful of correctness improvements around Kerberos SPNs, SMB security descriptors, and GUID handling.

Manticore v1.1.0: Introducing SMB 2.0

Thu, 11 Jun 2026 14:23:43 +0000

Manticore is the Go library of offensive and defensive security primitives that underpins the tools of The Manticore Project: protocol stacks, cryptography, parsers, and the wire structures you need when you cannot rely on a host’s native client. Until now, the SMB stack in Manticore was effectively SMB1-only. That is enough to talk to legacy targets, but it leaves out the dialect that has been the default on Windows for more than a decade.