S3cur3Th1sSh1t / WinPwn

Automation for internal Windows Penetrationtest / AD-Security
BSD 3-Clause "New" or "Revised" License
3.28k stars 515 forks source link

ClearText password in shared folder issue #24

Closed PentesterTN closed 3 years ago

PentesterTN commented 3 years ago

everytime I choose to search for cleartext password in shared folder I got this error :

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

You cannot call a method on a null-valued expression. At line:4384 char:13

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

You cannot call a method on a null-valued expression. At line:4384 char:13

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

You cannot call a method on a null-valued expression. At line:4384 char:13

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

You cannot call a method on a null-valued expression. At line:4384 char:13

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

You cannot call a method on a null-valued expression. At line:4384 char:13

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

You cannot call a method on a null-valued expression. At line:4384 char:13

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

The right operand of '-as' must be a type. At line:4391 char:17

S3cur3Th1sSh1t commented 3 years ago

Via Passhunt or via Snaffler?

PentesterTN commented 3 years ago

it was via passhunt

S3cur3Th1sSh1t commented 3 years ago

Should be fixed with 700801a5fbe6e72a8165cec4e40d62a3400e2f5b. Can you re-check?

PentesterTN commented 3 years ago

Should be fixed with 700801a. Can you re-check?

Sure I will check it now,

PentesterTN commented 3 years ago

after testing, it took like 9 hours Searching for Shares on the found Windows Servers..., then when I clicked any button it opened dozens of powershell windows, I had to force close them.

PentesterTN commented 3 years ago

I believe it's because I'm testing it against a large environment (+2000 servers)

S3cur3Th1sSh1t commented 3 years ago

I had a same situation from time to time. Running this check in a big environment will typically cause this issue - the CPU can’t handle too many share searches in parallel processes.

But now you should have a list for all shares in the domainrecon folder. I would reduce the size of this list and choose only the interesting ones. Afterwards you can run the check again and it will take the existing list 👍 should be fine for the CPU than.

PentesterTN commented 3 years ago

I see, so now I think I can close this, Thank you for your support and gg for such a great tool!