Skip to content
stellvia.dev

Impacket Commands and Implementation

This Impacket guide starts with “What does this command do?” and lets you follow the code as needed. Each command page covers the inputs to examples/*.py, processing branches, output, side effects, and key implementation locations. The technology pages explain protocols used by multiple commands and shared implementations under impacket/. When changing code, also see the shared architecture.

These commands include credential extraction, relay, remote execution, persistence, and other features that can have a substantial impact on target systems. Use them only in a test environment or one for which you have explicit authorization.

Start Here

Section titled “Start Here”

Scope

Section titled “Scope”

This guide covers Python files directly under examples/ that are distributed through the following setting in setup.py. The text and source links are based on Impacket 0.14.0.dev at commit 1875828d (October 1, 2026). On October 11, 2026, we confirmed that the bundled packages/impacket tree pointed to this commit and checked the CLI arguments, main processing paths, and shared implementations. Later changes are outside the scope of this version; check the source history before use.

scripts=glob.glob(os.path.join('examples', '*.py'))

Therefore, modules under impacket/examples/ are treated as shared implementations used by CLI commands, rather than as standalone commands. Each page’s “Internal Dependencies” section lists only the most important shared implementations.

How to Read This Guide

Section titled “How to Read This Guide”

If you know which command you need, select its page from a category index and read “Overview” and “Detailed Processing Flow” to understand its behavior. Follow links in “Key Implementation Elements” to find the code entry points. The external packages section lists only packages used directly by the command. See the shared architecture for common dependencies and checks to make when changing code.

If you want to understand Kerberos or LDAP first, read the Impacket technology pages alongside the Active Directory guides. The former cover how the library implements them; the latter cover what happens on Windows. For the definitive CLI options, consult the source and python examples/<command>.py -h.