[Name]
impacket-rs

[Version]
0.1.0

[Homepage]
https://github.com/nestho/impacket-rs

[Download]
https://github.com/nestho/impacket-rs/releases/tag/v0.1.0
Source tarball: https://github.com/nestho/impacket-rs/archive/refs/tags/v0.1.0.tar.gz

[Author]
Nestho (@nestho) - https://github.com/nestho

[Licence]
Apache-2.0

[Description]
impacket-rs is a ground-up, memory-safe rewrite of core Impacket Windows network protocols and Active Directory assessment utilities in pure Rust (supporting Windows 2000 through Windows Server 2025).

Key capabilities:

• Single multi-call native binary (impacket-rs) with 74 subcommands covering remote execution (psexec, wmiexec, smbexec, atexec, dcomexec), credential extraction (secretsdump, ntdsdump, dpapi, Get-GPPPassword), Kerberos attacks & ticket operations (GetNPUsers, GetUserSPNs, getTGT with RFC 6113 FAST armoring, getST, raiseChild, ticketer, ticketConverter), AD/LDAP administration (ldapclient, findDelegation, rbcd, dacledit, dnstool), SMB/MSSQL utilities, and cross-protocol relaying (ntlmrelayx).
• Zero Python or C runtime dependencies; pure-Rust cryptographic primitives and zero-copy NDR/NDR64 marshaling.
• Ships as a single /usr/bin/impacket-rs executable, avoiding any filename collisions with Kali's existing python3-impacket package.

[Dependencies]
Build dependencies:

• rustc (>= 1.75, Rust 2021 edition)
• cargo

Runtime dependencies:

• libc6 (standard glibc on Debian/Kali; zero external runtime libraries required)

[Similar tools]

• impacket (python3-impacket)
• netexec / crackmapexec
• bloodyad

[Activity]
Actively developed and maintained by the upstream author (@nestho). Started in 2026 with regular commits, automated CI test suites (cargo test --workspace), security auditing (Trivy, cargo-audit, SonarCloud), and cross-platform builds.

[How to install]
From the v0.1.0 release source tarball:

1. Extract the release archive and enter the directory:
   tar -xzf impacket-rs-0.1.0.tar.gz && cd impacket-rs-0.1.0
2. Compile the release binary:
   cargo build --release --locked
3. Install the binary:
   install -Dm755 target/release/impacket-rs /usr/bin/impacket-rs

[How to use]
Display all 74 subcommands:
impacket-rs --help

Remote SAM/LSA/DCSync credential dump:
impacket-rs secretsdump corp.local/administrator:[email protected]

Request Kerberos TGT with RFC 6113 FAST armoring:
impacket-rs getTGT -fast armor.ccache corp.local/user:[email protected]

Enumerate Active Directory Kerberos delegation with ASCII trust graphs:
impacket-rs findDelegation -graph corp.local/user:[email protected]

Offline NTDS.dit hash extraction:
impacket-rs ntdsdump -ntds ntds.dit -system SYSTEM

[Packaged]
Not yet packaged for Debian or Kali. Upstream author is active and willing to assist with adding a debian/ packaging directory or adjusting build configurations to meet Kali packaging standards.