Devolutions / Devolutions/sspi-rs

Interest in cross-referencing / potential integration — adhammer (AD security toolkit)

Open
#722 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
83
Forks
50
Avg merge
3d 12h
Merged PRs (30d)
9

Description

Hi,

I'm the author of adhammer (https://github.com/icedracon/adhammer), an Active Directory security-assessment toolkit written in Rust. Rather than wrapping impacket or another Python stack, I ended up writing a from-scratch DCE/RPC / NTLM / SMB2 / Kerberos implementation to get a single static binary that runs on both Linux and Windows for authorized AD audit and red-team validation work (PingCastle-style scoring + BloodHound-style attack-path graphing + real PoC validation, e.g. actual DCSync/golden-ticket/pass-the-ticket artifacts, not just theoretical findings).

I think there could be real overlap between what I built and this crate. A few things I'd love to explore:
- Whether parts of my protocol stack (NTLM/Kerberos/SMB2 auth flows) could be split into standalone crates and cross-referenced with this project, so neither of us duplicates low-level protocol work
- Whether adhammer could consume sspi-rs directly for NTLM/Kerberos negotiation instead of my own implementation, if it covers the same ground
- General interest in comparing notes on Windows auth protocol edge cases — I hit a few gaps in public documentation while building this

Happy to share write-up/benchmarks:github.com/icedracon/adhammer Let me know if this is interesting or if I'm duplicating effort you've already solved better.

Zorayr

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing sspi-rs's existing authentication coverage and comparing it with adhammer's NTLM, Kerberos, SMB2, and DCE/RPC stack. Determine whether a concrete integration or cross-reference is useful, and define the supported protocol scope and ownership before proposing implementation work.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.