Module: Msf::Exploit::Remote::Relay::Kerberos::Target

Defined in:
lib/msf/core/exploit/remote/relay/kerberos/target.rb,
lib/msf/core/exploit/remote/relay/kerberos/target/http/client.rb

Overview

Kerberos relay targets (CVE-2026-20929). Mirrors the structure of the NTLM relay stack under NTLM::Target: a relay server captures a client’s Kerberos AP-REQ and hands it to a target here, which replays it to a real service via a per-protocol client.

Defined Under Namespace

Modules: HTTP Classes: RelayResult

Class Method Summary collapse

Class Method Details

.create_client(provider, target, logger, timeout) ⇒ Object

Build the relay target client for a target’s protocol, bound to the relay server connection. Mirrors the NTLM server client’s create_relay_client; the single dispatch point new protocols (e.g. LDAP) plug into.

Parameters:

  • provider (Object) —

    the relay server connection (supplies the TLS context)

  • target (Object) —

    the relay target descriptor (its #protocol selects the client)

  • logger (Object) —

    receives print_* logging calls

  • timeout (Integer) —

    send/recv timeout (-1 for the default)

Returns:

  • (Object) —

    a per-protocol relay target client

Raises:

  • (ArgumentError) —

    if the target protocol has no Kerberos relay client



31
32
33
34
35
36
37
38
 
# File 'lib/msf/core/exploit/remote/relay/kerberos/target.rb', line 31

def self.create_client(provider, target, logger, timeout)
  case target.protocol
  when :http, :https
    HTTP::Client.create(provider, target, logger, timeout)
  else
    raise ArgumentError, "unsupported Kerberos relay target protocol: #{target.protocol}"
  end
end