v1.2.1

Changelog

• Downgraded LDAP library due to incompatibility with the SOCKS proxy function of ntlmrelayx.py

v1.2.0

Changelog

• Fixed compatibility with domain controllers that have the January 2026 update installed
• Display Validated Write Compatible badge when validated writes are possible rather than when the KeyCredentialLink is strictly spec compliant because the spec is incompatible with Microsoft's implementation
• Updated dependencies
• Added banner with version

v1.1.5

Changelog

• Fixed incorrect certificate being loaded from PFX files where the leaf/client certificate is not the first certificate.

v1.1.4

Changelog

• Added version command for keycred and pfxtool
• Improved pfxtool inspect
• Updated dependencies

v1.1.3

Changelog

• Entra JWT key material is now parsed
• Entra ID KCL timestamps are now parsed correctly
• FIDO: Added MS Authenticator UUIDs
• FIDO: Non-x509 certs in key material are now displayed

v1.1.2

Changelog

• Fixed plain LDAP NTLM authentication
• 3f19eea Force Kerberos for burn command
• 7e47246 Update linter, CI and dependencies
• 3bfecfc go mod tidy

v1.1.1

Changelog

• 0c694ef Improve time formatting
• b2c23e3 Updat dependencies
• 25c9cee Update adauth
• 63c38a9 Update dependencies
• 502cc07 go mod tidy

v1.1.0

• keycred: Added SOCKS5 support
• keycred: Added partial support for FIDO key credential links
• pfxtool: Fixed an issue where the password is ignored when creating a PFX file
• Updated dependencies

v1.0.0

This is the initial release of keycred. The pre-built archives attached to this release also contain pfxtool.