Impacket-RS v0.1.0 — Initial Production Release

High-performance, memory-safe pure-Rust redesign of Impacket network protocols and Active Directory tool suite for Linux, macOS, and Windows.

100% Example Tool Parity: Full native Rust implementations of all 74 Impacket tools (secretsdump, ntlmrelayx, psexec, wmiexec, smbclient, GetNPUsers, GetUserSPNs, dcomexec, samrdump, lookupsid, ticketConverter, and 63 more).
Multi-Call Binary Architecture: Single compact binary (impacket-rs <tool> [args]) with direct symlink execution (ln -s impacket-rs secretsdump).
Protocol Engine:
- Pure-Rust SMB2.0.2 – SMB3.1.1 with AES-GCM / AES-CCM transform encryption and SP800-108 KDF key derivation.
- MSRPC & DCE/RPC over named pipes, TCP/135, and raw sockets with packet integrity and privacy.
- Kerberos v5 pre-authentication, AS-REQ / AS-REP parsing, PAC decoding, and ticket conversion (.ccache <-> .kirbi).
- Direct LDAP / LDAPS queries, Active Directory object management, and LAPS password retrieval.
- Pure-Rust Microsoft SQL Server (TDS) client.
Security & Memory Safety:
- Volatile memory scrubbing (zeroize_slice) on all credentials, hashes, and session keys upon drop.
- Zero unsafe memory operations in protocol decoders.
- Trivy scanner and Cargo Audit verified in CI.
Cross-Platform Compatibility: Tested and verified across Linux (GNU & Musl), macOS (Apple Silicon & Intel), and Windows.

Download the archive for your architecture below and extract the binary:

tar -xzf impacket-rs-x86_64-unknown-linux-gnu.tar.gz
./impacket-rs --help

git clone https://github.com/nestho/impacket-rs.git
cd impacket-rs
cargo build --release
./target/release/impacket-rs --help

Navigation Menu