Skip to content

Support multibyte template names for AD CS ESC8#2127

Merged
alexisbalbachan merged 1 commit intofortra:masterfrom
i-am-not-an-ai:master
Apr 22, 2026
Merged

Support multibyte template names for AD CS ESC8#2127
alexisbalbachan merged 1 commit intofortra:masterfrom
i-am-not-an-ai:master

Conversation

@i-am-not-an-ai
Copy link
Copy Markdown
Contributor

No description provided.

@NeffIsBack
Copy link
Copy Markdown
Contributor

No PR description?

@i-am-not-an-ai
Copy link
Copy Markdown
Contributor Author

  • Certificate templates of AD CS can contain multibytes on its template name
  • Current ntlmrelayx fails ESC8 attack (relay to HTTP) when template name contains multibyte
  • This PR fix that bug by escaping template name which contains multibyte

@anadrianmanrique anadrianmanrique added the in review This issue or pull request is being analyzed label Feb 19, 2026
@alexisbalbachan
Copy link
Copy Markdown
Collaborator

Thank you for this PR, merging it now

@alexisbalbachan alexisbalbachan merged commit c64818c into fortra:master Apr 22, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in review This issue or pull request is being analyzed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants