CravateRouge / bloodyAD

BloodyAD is an Active Directory Privilege Escalation Framework
MIT License
1.12k stars 112 forks source link

add computer - LDAPInvalidCredentialsResult - 49 - invalidCredentials - None - ERROR_LOGON_FAILURE: Logon failure: Unknown user name or bad password. - bindResponse - None #38

Closed embargod closed 7 months ago

embargod commented 1 year ago

Before i add another computers with addcomputer tool (via SAMR and LDAPS) then get writable works okay image

But add computer false for reason image

embargod commented 1 year ago

Sorry, missed screenshot (i tried to add existing computer :D)

Now i try to add COMP1337 and same issue also with full dn name 'CN=COMP1337,CN=Computers,DC=cringe,DC=corp' doesn't work image

CravateRouge commented 1 year ago

It's a NTLM logon failure, not related with computer creation. Your AD is refusing NTLM login with pparker with Password1. You can still try with another user and/or another bloody AD functionality such as get object.

embargod commented 1 year ago

get object works, so what happens? image

CravateRouge commented 1 year ago

I think you should retry add computer

embargod commented 1 year ago

image

CravateRouge commented 1 year ago

Try adding -s flag before add computer

embargod commented 1 year ago

same error

CravateRouge commented 1 year ago

I have no idea what's going on, you can still try kerberos

embargod commented 1 year ago

for you it works correctly?

CravateRouge commented 1 year ago

It does

embargod commented 1 year ago

okay, so shit happens, i need debug this

CravateRouge commented 7 months ago

Should be fixed with 3bc06f6e6fd5de4c698c794d84b847a994083305

Connecting user password was erased by the new password parameter of the computer you added because argparse namespace is flat, there is no distinction between parser arguments and subparsers arguments so if some have the same name it will erase the one in the parser. I had hard time to spot it because I was always testing with the same pass so never saw the issue