Fix mmcexec method thanks to @ippsec AND a lot of other small things #361
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
mpgn
requested review from
zblurx,
Marshall-Hallenbeck and
NeffIsBack
as code owners
|
Also pushed a small fix for a bug with |
|
last commit fix a hugggggee stacktrace if port 636 is closed (aka ldaps not open) |
…ver option to laps
mpgn
changed the title
|
Updated lsassy to 3.1.12 as it fixes an issue where lsassy would hang on failure: |
NeffIsBack
reviewed
Jul 5, 2024
|
Previously |
|
Fixed authentication without NTLM being available: If there is no NTLM we need a hostname for authentication. Line 527 in ccbeb4e self.remotename needs a valid hostname for kerberos auth afaik.
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
During @IppSec video about JAB Hackthebox Windows, he spotted a bug related to dcom exec.
https://youtu.be/tprP-GDW_6c?si=mjIlmENq92Kx_u6E&t=1659
To execute remote commands using dcom you don't need to be admin (or have the privilege to start a service) making the check (admin_require) not relevant for this method.
This PR fix the problem :)
Before:
After:
Command exec: