HunnicCyber / SharpSniper

Find specific users in active directory via their username and logon IP address
374 stars 55 forks source link

unhandled exception: rpc server is unavailable #4

Open revronja opened 4 years ago

revronja commented 4 years ago

unhandled exception: rpc server is unavailable

HunnicCyber commented 4 years ago

Could you give a little more detail please?

What command have you run - are you passing it credentials, or is it token based?

What sort of environment are you running it in?

Thanks

revronja commented 4 years ago

Oh whoops I have another issue going on .

I am running a virtualbox VM WIN 10 evaluation copy that is domain joined.

I run sharpsniper.exe bob jeffadmin jeffpassword

Jeff is a test domain admin

Sent from my iPhone

On Sep 24, 2019, at 1:24 AM, Hunnic Cyber Limited notifications@github.com wrote:

Could you give a little more detail please?

What command have you run - are you passing it credentials, or is it token based?

What sort of environment are you running it in?

Thanks

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

HunnicCyber commented 4 years ago

I would suggest that you get your test domain in order :)

Most likely you have firewall issues, the RPC server is not running or similar.

A quick google points to this site - https://www.lansweeper.com/knowledgebase/the-rpc-server-is-unavailable/

If you have set up your environment and cannot make those calls regardless of SharpSniper or not, then likely it's not a tool issue.

Let me know how you get on

revronja commented 4 years ago

ok a new exception!

sharpsniper.exe bob jeffadmin jeffpassword

Unhandled exception: System.Diagnostics.Eventing.Reader.EventLogException: a security specific packager error occurred.

HunnicCyber commented 4 years ago

Do you have DNS properly set up in your AD environment?

revronja commented 4 years ago

I hope so, have the domain controller with the DNS role installed and the WIN10 using the ip of the domain controller for its DNS settings. I'm looking at the security event logs and seeing logons. smh

HunnicCyber commented 4 years ago

I'd like to wait at this time and see if someone else gets the same issue as it may end up being debugging your AD env rather than the tool.

I can't replicate in my test domain, nor those I've known who've tried it.

I'll keep the issue open. Any further information you can provide, OS ver for DC etc is useful and I'll play around, see if I can troubleshoot.

revronja commented 4 years ago

Thanks mate. Win10 & Win2016 eval copy

On Sep 26, 2019, at 3:41 PM, Hunnic Cyber Limited notifications@github.com wrote:

I'd like to wait at this time and see if someone else gets the same issue as it may end up being debugging your AD env rather than the tool.

I can't replicate in my test domain, nor those I've known who've tried it.

I'll get the issue open. Any further information you can provide, OS ver for DC etc is useful and I'll play around, see if I can troubleshoot.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

revronja commented 4 years ago

tear emoji!! what am i doing wrong? I am so excited to get this tool to work and try your other tools but I am doing something dumb and I know it.

  1. I grabbed the release from github
  2. win 10 - joined to a domain 2016 server
  3. put in sharpsniper user DAUSER DAPASS (valid user, valid DA, valid DA Pass)

[image: image.png]

On Fri, Sep 27, 2019 at 9:05 AM tesme ouside tmo1ronja@gmail.com wrote:

Thanks mate. Win10 & Win2016 eval copy

On Sep 26, 2019, at 3:41 PM, Hunnic Cyber Limited < notifications@github.com> wrote:

I'd like to wait at this time and see if someone else gets the same issue as it may end up being debugging your AD env rather than the tool.

I can't replicate in my test domain, nor those I've known who've tried it.

I'll get the issue open. Any further information you can provide, OS ver for DC etc is useful and I'll play around, see if I can troubleshoot.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/HunnicCyber/SharpSniper/issues/4?email_source=notifications&email_token=AJAANA74EUKCKDICCGF2QV3QLUM7JA5CNFSM4IZV45W2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD7W4WSY#issuecomment-535677771, or mute the thread https://github.com/notifications/unsubscribe-auth/AJAANA37FSHA7JB5YJCXWM3QLUM7JANCNFSM4IZV45WQ .

HunnicCyber commented 4 years ago

How are you putting in user?

revronja commented 4 years ago

SharpSniper.exe chadceo bobadmin bobadminpassword

chadceo is a normal domain user account.

Sent from my iPhone

On Oct 23, 2019, at 5:04 PM, Hunnic Cyber Limited notifications@github.com wrote:

How are you putting in user?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe.

revronja commented 4 years ago

Still having issues. Setup my ADenv again maybe I will try debugging in an IDE.

On Oct 23, 2019, at 5:04 PM, Hunnic Cyber Limited notifications@github.com wrote:

How are you putting in user?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe.