Ridter / noPac

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
799 stars 123 forks source link

[-] Cannot rename the machine account , Reason 00000523: SysErr: DSID-031A1260, problem 22 (Invalid argument), data 0 #18

Open useragent23253 opened 1 year ago

useragent23253 commented 1 year ago

oot@US-UBNT:~/Github/noPac# sudo python3 noPac.py VB.local/user:'password2' -dc-ip 192.168.0.10 -shell --impersonate administrateur -use-ldap -dump [] Current ms-DS-MachineAccountQuota = 10 [] Selected Target srv-dc.cns.local [] will try to impersonate administrateur [] Adding Computer Account "WIN-OAUXQPSRDGR$" [] MachineAccount "WIN-OAUXQPSRDGR$" password = RqkVgjy(Y5d [] Successfully added machine account WIN-OAUXQPSRDGR$ with password RqkVgjy(Y5d. [*] WIN-OAUXQPSRDGR$ object = CN=WIN-OAUXQPSRDGR,CN=Computers,DC=CNS,DC=LOCAL [-] Cannot rename the machine account , Reason 00000523: SysErr: DSID-031A1260, problem 22 (Invalid argument), data 0

[*] Attempting to del a computer with the name: WIN-OAUXQPSRDGR$ [-] Delete computer WIN-OAUXQPSRDGR$ Failed! Maybe the current user does not have permission.

davidlebr1 commented 1 year ago

I came across the same issue. Did you find a solution? I'm thinking that it is patched.

bushdav commented 1 year ago

How about user rights?

useragent23253 commented 1 year ago

Default domain user

bushdav commented 1 year ago

What do you mean ?

useragent23253 commented 1 year ago

just domain user

kraperrm commented 1 year ago

I have same issue. Normal domain user and --impersonate is Domain Admin Computer Created in Domain but error showing [-] Cannot rename the machine account , Reason 00000523: SysErr: DSID-031A1260, problem 22 (Invalid argument), data 0 I think Nopac creator also not know about this error Any one Expert please reply.

davidlebr1 commented 1 year ago

I figure it out the issue. The user I was using didn't have the permission to create computer object.

bushdav commented 1 year ago

with the default MachineAccountQuota present ?

kraperrm commented 1 year ago

Computer object created but kerberos sessionerror kdc_err_tgt_revoked(tgt has been revoked). After Server update with kb5008380 Patch Nopac not able to work. After this patch applied, even Domain admin Also gave this error. I have tried Domain Admin User and password Instead of normal user. (with the default MachineAccountQuota 10)