https://themanticoreproject.com/tags/windows/Recent content in Windows on The Manticore ProjectHugoen-USFri, 07 Nov 2025 09:07:33 +0000https://themanticoreproject.com/blog/manticore-v1-0-6-windows-cng-bcrypt-structs/Fri, 07 Nov 2025 09:07:33 +0000https://themanticoreproject.com/blog/manticore-v1-0-6-windows-cng-bcrypt-structs/<p>Manticore is the Go library that backs the offensive and defensive security tooling of The Manticore Project. It collects the low-level primitives those tools rely on: wire structures, cryptographic key formats, identifier types, and parsers for the binary blobs that Windows and Active Directory hand you. The goal is that a tool author never has to re-implement a security descriptor parser or a UUID generator from scratch.</p> <p>In this release, v1.0.6, I focused on two fronts. The first is breadth: new Windows CNG/BCrypt key structures and the remaining members of the UUID family. The second is consistency: a sweep across the codebase to align naming and parsing APIs so that everything behaves the same way.</p>https://themanticoreproject.com/blog/manticore-v1-0-4-keycredential-time-fixes/Wed, 29 Oct 2025 10:58:34 +0000https://themanticoreproject.com/blog/manticore-v1-0-4-keycredential-time-fixes/<p>Manticore is the Go library of offensive and defensive security primitives that underpins the tools of The Manticore Project. This release, <strong>v1.0.4</strong>, is a small maintenance update: there are no new features, just a focused round of bug fixes in the Windows KeyCredential time handling.</p> <h2 id="keycredential-time-functions">KeyCredential time functions</h2> <p>KeyCredential blobs (the <code>msDS-KeyCredentialLink</code> attribute used by Windows Hello for Business and shadow-credentials tooling) carry timestamps such as the key creation and last-update times. Getting these conversions right matters, since an off-by-one or misencoded timestamp can produce a blob that the directory rejects, or one that misrepresents when a key was created.</p>