Repo brief: fortra/impacket

Generated by RepoPilot · document generated 2026-09-17 · concise human review Evidence snapshot · analyzed 2026-09-17T02:23:42.611Z · commit 6c9907e2f530

Verdict

Mixed — Evidence incomplete — review before adopting

• Last commit 1d ago
• 55+ active contributors
• Distributed ownership (top contributor 15% of recent commits)
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard

What it is

Impacket is a Python library providing low-level programmatic access to network protocol packets and implementations, particularly focused on SMB (1-3), MSRPC, Kerberos, NTLM, and LDAP. It enables construction and parsing of network packets from scratch and implements complete protocol stacks for Windows-based network communication, making it the foundation for security tools that interact with Windows network infrastructure. Monolithic Python package under /impacket with layered protocol implementations: low-level packet classes (ImpactPacket.py, ImpactDecoder.py) at the base; protocol-specific modules for Ethernet/IP/TCP/UDP; DCE-RPC implementation tree under impacket/dcerpc/v5/ with…

Start here

• impacket/dcerpc/v5/ndr.py: Core NDR (Network Data Representation) marshalling/unmarshalling engine; essential for all…
• impacket/dcerpc/v5/dtypes.py: Defines Windows data types (SID, GUID, FILETIME, etc.) used across all MSRPC interfaces;…
• impacket/ImpactPacket.py: Base packet class hierarchy for Ethernet, IP, TCP, UDP, ICMP; low-level protocol layer upon which…
• impacket/ImpactDecoder.py: Packet parsing/decoding logic; counterpart to ImpactPacket.py for reversing raw network data…
• impacket/dcerpc/v5/rpcrt.py: DCE-RPC runtime and transport layer; handles connection management, fragmentation, and…

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

Clone: git clone https://github.com/fortra/impacket.git. Install from stable: python3 -m pipx install impacket (or python3 -m pip install impacket). For development from master: cd impacket && pip install -e . (…

Daily commands:

Impacket is a library, not a runnable application. Use it by importing: python3 -c "from impacket.dcerpc.v5 import epm; print(epm)"; or run included example tools (not visible in file list but mentioned in README cont…

…shortened for this brief.

Key cautions & unknowns

• Could not verify license from the available repository evidence
• NTLM/Kerberos key derivation requires exact Windows behavior—deviations break domain authentication. DCE-RPC fragmentation logic is complex; packet boundaries matter for large requests. Some interfaces (WMI, DCOM)…
• License evidence is incomplete or ambiguous.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.