search

GhostPack / PSPKIAudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.
Microsoft Public License
792 stars 109 forks source link

"Operation is not supported on this platform." from runas /netonly #8

Closed phackt closed 1 year ago

phackt commented 3 years ago

Hi, did you succeed in using your module from a non joined machine (runas /netonly) ?. I'm facing this issue:

> Get-AuditCertificateAuthority -CAComputerName ac1.contoso.local
Exception calling "GetAdPkiContainer" with "1" argument(s): "Operation is not supported on this platform."
At C:\Users\user\Documents\tools\pentest\PSPKIAudit\PSPKI\3.7.2\Server\Get-CertificationAuthority.ps1:18 char:9
+         $DSList = [SysadminsLV.PKI.Management.ActiveDirectory.DsPkiCo ...
+         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
    + FullyQualifiedErrorId : PlatformNotSupportedException

Any call to any function of the module is propagating the same exception. Thanks,

7MinSec commented 2 years ago

Just wanted to add a "same issue" comment. We do our pentests from a non-domain-joined jumpbox, so having the ability to run this tool under runas context would be awesome.

Crypt32 commented 2 years ago

This is not supported. There is a little value in running PSPKIAudit module on non-domain joined machines. For example, you cannot access certificate templates from workgroups for analysis and certificate templates are big part of this module.