byt3bl33d3r / CrackMapExec

A swiss army knife for pentesting networks
BSD 2-Clause "Simplified" License
8.29k stars 1.64k forks source link

[Bug/Feature Request] Add dns server option to CME #783

Open thatssorude opened 1 year ago

thatssorude commented 1 year ago

Hello While using ldap as protocol for CME i got error: Error connecting to the domain, are you sure LDAP service is running on the target

I searched for the issue on github and solution is to configure DNS in resolv.conf HOWEVER, I can't do this due to using the socks4 proxy to private network(and I'm not sure it will work with socks5, I can't check now) adding a host to /etc/hosts also doesn't help

It would be great if you will add DNS resolution from certipy so that it could work. : https://gist.github.com/EspressoCake/257df980ad0c6873da932b7512d48a40

cc https://twitter.com/the_bit_diddler/status/1542675467563663360

Something like: --dns-ip 1.3.3.7

Also please have a look on how dns resolution working in bloodhound.py https://github.com/fox-it/BloodHound.py They have two options: udp and tcp DNS I'm not sure in which cases udp dns or the script I gave above can fail, but i think i need to mention that because dirkjan add this option for something