search

AlmondOffSec / PassTheCert

Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel
Apache License 2.0
555 stars 71 forks source link

Potential Incorrect Screenshot #14

Closed Cyb3rC3lt closed 1 year ago

Cyb3rC3lt commented 1 year ago

Hi guys,

I was using your brilliant tool today which got me DA eventually, but I think I noticed an issue in this screenshot. In this it seems you added the delegation to your Dummy computer which you added with add computer but really the attribute should be added the other way round. So the attribute goes onto the DC (in my case) specifying the Dummy computer.

As soon as I did that it worked fine.

Hope this helps

pass_the_cert_python

ThePirateWhoSmellsOfSunflowers commented 1 year ago

Hello, I'm glad our tool got you DA! I took this screenshot to illustrate the blog post and to show 3 functions: add computer via implicite TLS, add computer via explicite TLS and RBCD via Schannel. The goal was not to show a real case scenario, but only few exemples. Sorry if it misled you.

:sunflower:

Cyb3rC3lt commented 1 year ago

Ah fair enough, I thought it was a playbook. Thanks for the reply 👍🏻