swisskyrepo
/
NetExec
mirror of https://github.com/swisskyrepo/NetExec.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix(kerberos): only use kcache if asked to via cml parameters; add additional debug and error handling

main
Marshall Hallenbeck 2023-11-09 12:51:09 -05:00
parent f1388aa429
commit 26b9ecc482
1 changed files with 27 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
nxc/protocols/ldap/kerberos.py
View File

@ -104,6 +104,7 @@ class KerberosAttacks:
return entry return entry
def get_tgt_kerberoasting(self): def get_tgt_kerberoasting(self):
if self.args.use_kcache:
if getenv("KRB5CCNAME"): if getenv("KRB5CCNAME"):
nxc_logger.debug("KRB5CCNAME environment variable exists, attempting to use that...") nxc_logger.debug("KRB5CCNAME environment variable exists, attempting to use that...")
try: try:
@ -121,6 +122,8 @@ class KerberosAttacks:
nxc_logger.debug("No valid credentials found in cache") nxc_logger.debug("No valid credentials found in cache")
except Exception: except Exception:
pass pass
else:
nxc_logger.fail("KRB5CCNAME environment variable not found, unable to use Kerberos Cache")
# No TGT in cache, request it # No TGT in cache, request it
user_name = Principal(self.username, type=constants.PrincipalNameType.NT_PRINCIPAL.value) user_name = Principal(self.username, type=constants.PrincipalNameType.NT_PRINCIPAL.value)
@ -140,6 +143,12 @@ class KerberosAttacks:
self.aesKey, self.aesKey,
kdcHost=self.kdcHost, kdcHost=self.kdcHost,
) )
except OSError as e:
if e.errno == 113:
nxc_logger.fail(f"Unable to resolve KDC hostname: {e!s}")
else:
nxc_logger.fail(f"Some other OSError occured: {e!s}")
return None
except Exception as e: except Exception as e:
nxc_logger.debug(f"TGT: {e!s}") nxc_logger.debug(f"TGT: {e!s}")
tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT( tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(
@ -151,7 +160,6 @@ class KerberosAttacks:
self.aesKey, self.aesKey,
kdcHost=self.kdcHost, kdcHost=self.kdcHost,
) )
else: else:
tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT( tgt, cipher, oldSessionKey, sessionKey = getKerberosTGT(
user_name, user_name,
@ -166,7 +174,7 @@ class KerberosAttacks:
tgt["KDC_REP"] = tgt tgt["KDC_REP"] = tgt
tgt["cipher"] = cipher tgt["cipher"] = cipher
tgt["session_key"] = sessionKey tgt["session_key"] = sessionKey
nxc_logger.debug(f"Final TGT: {tgt}")
return tgt return tgt
def get_tgt_asroast(self, userName, requestPAC=True): def get_tgt_asroast(self, userName, requestPAC=True):