Manticore is a framework for working with Windows network protocols (SMB, LDAP, DCE/RPC, and more), cryptography, and authentication, designed for building cross-platform security tooling.

Features

• Cross-Platform Support: Works on Windows, Linux, and macOS — no Windows API dependency.
• Authentication: NTLM (v1/v2), SPNEGO/GSSAPI, LDAP bind, and a native Kerberos v5 stack — AS/TGS exchanges, PKINIT, FAST, S4U (S4U2self/S4U2proxy), U2U, AS-REP roasting and Kerberoasting, golden/silver/diamond/sapphire ticket forging, UnPAC-the-hash, and keytab/ccache/kirbi credential I/O.
• Network Protocols: SMB 1.0 (CIFS) and SMB 2.0, a full DCE/RPC stack (NDR, EPM, ncacn_ip_tcp/ncacn_np/ncacn_http transports) exposing LSARPC, SAMR, SRVSVC, SVCCTL, DRSUAPI and WINREG, plus LDAP, LLMNR and NetBIOS name services.
• Cryptography: aescts, cmac, dcc, dcc2, gppp, lm, md4, nfold, nt, ntlmv1, ntlmv2, pkcs7, rc4, spnego, uuid
• Windows Internals: Offline NTDS.dit secret extraction (ESE/JET parser + PEK decryption), REGF registry hive read/write, Active Directory replication metadata (DS_REPL_*), KeyCredentialLink, and CNG (bcrypt) key blobs.
• Extensible Architecture: Easily add new modules and functionality.

Installation

To use this framework you can either download the latest release from the GitHub release page or add it to your project with the following go command:

go get github.com/TheManticoreProject/Manticore@latest

Roadmap

Each module is colored by advancement state — 🟢 implemented & tested · 🟠 partial / in progress · 🔴 not yet implemented — where a parent inherits the worst color of its submodules. The graph below mirrors the package tree on disk; this shows the top level only.

graph LR
  root["Manticore 🔴"]:::c0
  n_crypto["crypto 🟠"]:::c1
  n_encoding["encoding 🟠"]:::c1
  n_logger["logger 🟢"]:::c2
  n_network["network 🔴"]:::c0
  n_utils["utils 🟢"]:::c2
  n_windows["windows 🟠"]:::c1
  root --> n_crypto
  root --> n_encoding
  root --> n_logger
  root --> n_network
  root --> n_utils
  root --> n_windows
  classDef c2 fill:#1f8b4c,stroke:#155d33,color:#fff;
  classDef c1 fill:#d9822b,stroke:#a35d17,color:#fff;
  classDef c0 fill:#c0392b,stroke:#7d2419,color:#fff;

Loading

See docs/roadmap.md for the full module-by-module graph covering every package on the filesystem, and docs/gen_roadmap_graph.py which regenerates it.

Contributing

Pull requests are welcome. Feel free to open an issue if you want to add other features.

Credits

• Remi GASCOU (Podalirius) (@p0dalirius) for the creation of the Manticore project.
• SecureAuthCorp and @Fortra for creating and maintaining Impacket.