search

byt3bl33d3r / CrackMapExec

A swiss army knife for pentesting networks
BSD 2-Clause "Simplified" License
8.45k stars 1.64k forks source link

CME changes domain\ suffix to None\ #379

Closed init5-SF closed 4 years ago

init5-SF commented 4 years ago

Describe the bug CME changes domain suffix to None\ when used with winrm if used with smb it works perfect

To Reproduce Steps to reproduce the behavior: crackmapexec winrm -u user -p password

Expected behavior automatically find the domain name and append it to the user

Screenshots

root@kali:~/Desktop/CTF# crackmapexec winrm targets -u user.txt -p "P@ssw0rd"
WINRM       10.10.1.10   5985   NONE             [-] None\testuser:P@ssw0rd "('Connection aborted.', RemoteDisconnected('Remote end closed connection without response'))"

Crackmapexec info

mpgn commented 4 years ago

Hello @sxplitfirex does your target is linked to a domain ? I have trouble to reproduce the issue, you should try with latest version 5.0.2dev

mpgn commented 4 years ago

Closing since no update

init5-SF commented 4 years ago

Closing since no update

Sorry for not seeing this earlier. Yes, the target is domain joined, and the issue only happens with WINRM, the other protocols work fine.