Add native Kerberos relay stack and ESC8 (AD CS Web Enrollment) target (CVE-2026-20929) - #21709

Draft

Pushpenderrathore wants to merge 13 commits into

rapid7:masterfrom

Pushpenderrathore:feature/kerberos-relay-esc8

Commits on Jul 26, 2026

Add Kerberos AP-REQ extractor for relay (CVE-2026-20929)
Pushpenderrathore
committed
02bb347
Add GSS-SPNEGO AP-REQ forwarding for Kerberos relay
Pushpenderrathore
committed
87e46e0
Add HTTP relay target client for Kerberos relay
Pushpenderrathore
committed
41d8524
Add Kerberos relay orchestration handler
Pushpenderrathore
committed
be7a67c
Add Kerberos relay target client factory
Pushpenderrathore
committed
d433b88
Add SMB relay server client (capture side) for Kerberos relay
Pushpenderrathore
committed
26e29a8
Add SMB relay server for Kerberos relay
Pushpenderrathore
committed
efe47ae
Add ESC8 Kerberos relay target and module
Pushpenderrathore
committed
b89ce07
Document esc8_kerberos module
Pushpenderrathore
committed
ee72afd
Fix SMB2 SessionSetup bookkeeping in the Kerberos relay
Pushpenderrathore
committed
c9715ff

Commits on Jul 29, 2026

Commits on Aug 2, 2026

Fix two errors that only surface once a relay succeeds
Pushpenderrathore
committed
efbdada