swisskyrepo
/
NetExec
mirror of https://github.com/swisskyrepo/NetExec.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[mssql] fix ccache 

Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
main
XiaoliChan 2023-12-05 14:15:38 +08:00
parent 8a5d77b1d7
commit 93f3bccd7b
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
nxc/protocols/mssql.py
View File

@ -139,15 +139,16 @@ class mssql(connection):
): ):
with contextlib.suppress(Exception): with contextlib.suppress(Exception):
self.conn.disconnect() self.conn.disconnect()
# When using ccache file, we must need to set target host to hostname when creating connection object.
self.host = self.hostname
self.create_conn_obj() self.create_conn_obj()
kerb_pass = next(s for s in [self.nthash, password, aesKey] if s) if not all(s == "" for s in [self.nthash, password, aesKey]) else "" kerb_pass = next(s for s in [self.nthash, password, aesKey] if s) if not all(s == "" for s in [self.nthash, password, aesKey]) else ""
if useCache and kerb_pass == "": if useCache and kerb_pass == "":
ccache = CCache.loadFile(os.getenv("KRB5CCNAME")) ccache = CCache.loadFile(os.getenv("KRB5CCNAME"))
principal = ccache.principal.toPrincipal() username = ccache.credentials[0].header["client"].prettyPrint().decode().split("@")[0]
self.username = principal.components[0] self.username = username
username = principal.components[0]
self.username = username self.username = username
self.password = password self.password = password
@ -206,7 +207,6 @@ class mssql(connection):
self.domain = domain self.domain = domain
try: try:
# domain = "" is to prevent a decoding issue in impacket/ntlm.py:617 where it attempts to decode the domain
res = self.conn.login(None, username, password, domain, None, not self.args.local_auth) res = self.conn.login(None, username, password, domain, None, not self.args.local_auth)
if res is not True: if res is not True:
error_msg = self.handle_mssql_reply() error_msg = self.handle_mssql_reply()