fortra / impacket

Impacket is a collection of Python classes for working with network protocols.
https://www.coresecurity.com
Other
13.49k stars 3.57k forks source link

SMB SessionError: STATUS_MORE_PROCESSING_REQUIRED #1573

Open OctopusTR opened 1 year ago

OctopusTR commented 1 year ago

Configuration

impacket version: v0.10.0 Python version: 3.9.2 Target OS: Parrot OS

Debug Output With Command String

I updated the imppacket version and changed the SPN in different ways. Even in kali I get the same error. I couldn't find the solution, can you help?

┌─[root@Attacker-Machine]─[~]
└──╼ #impacket-getST vulnlab.local/gMSA2$ -hashes :982b0b907cc2d378007240465a57cf2a -spn CIFS/dc01.vulnlab.local -impersonate Administrator -dc-ip dc01.vulnlab.local
Impacket v0.10.0 - Copyright 2022 SecureAuth Corporation

[*] Getting TGT for user
[*] Impersonating Administrator
[*]     Requesting S4U2self
[*]     Requesting S4U2Proxy
[*] Saving ticket in Administrator.ccache

┌─[root@Attacker-Machine]─[~]
└──╼ #smbclient.py Administrator@dc01.vulnlab.local -k -no-pass -debug
Impacket v0.10.0 - Copyright 2022 SecureAuth Corporation

[+] Impacket Library Installation Path: /root/.local/pipx/venvs/impacket/lib/python3.9/site-packages/impacket
[+] Using Kerberos Cache: Administrator.ccache
[+] Domain retrieved from CCache: vulnlab.local
[+] Returning cached credential for CIFS/DC01.VULNLAB.LOCAL@VULNLAB.LOCAL
[+] Using TGS from cache
Traceback (most recent call last):
  File "/root/.local/pipx/venvs/impacket/lib/python3.9/site-packages/impacket/smbconnection.py", line 319, in kerberosLogin
    return self._SMBConnection.kerberosLogin(user, password, domain, lmhash, nthash, aesKey, kdcHost, TGT,
  File "/root/.local/pipx/venvs/impacket/lib/python3.9/site-packages/impacket/smb3.py", line 751, in kerberosLogin
    if ans.isValidAnswer(STATUS_SUCCESS):
  File "/root/.local/pipx/venvs/impacket/lib/python3.9/site-packages/impacket/smb3structs.py", line 458, in isValidAnswer
    raise smb3.SessionError(self['Status'], self)
impacket.smb3.SessionError: SMB SessionError: STATUS_MORE_PROCESSING_REQUIRED({Still Busy} The specified I/O request packet (IRP) cannot be disposed of because the I/O operation is not complete.)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/root/.local/bin/smbclient.py", line 100, in main
    smbClient.kerberosLogin(username, password, domain, lmhash, nthash, options.aesKey, options.dc_ip )
  File "/root/.local/pipx/venvs/impacket/lib/python3.9/site-packages/impacket/smbconnection.py", line 322, in kerberosLogin
    raise SessionError(e.get_error_code(), e.get_error_packet())
impacket.smbconnection.SessionError: SMB SessionError: STATUS_MORE_PROCESSING_REQUIRED({Still Busy} The specified I/O request packet (IRP) cannot be disposed of because the I/O operation is not complete.)
[-] SMB SessionError: STATUS_MORE_PROCESSING_REQUIRED({Still Busy} The specified I/O request packet (IRP) cannot be disposed of because the I/O operation is not complete.)
0xElessar commented 12 months ago

Got the same issue " SMB SessionError: STATUS_MORE_PROCESSING_REQUIRED({Still Busy} The specified I/O request packet (IRP) cannot be disposed of because the I/O operation is not complete.)", but using different tool smbclient.py. The error happens during the communication with the domain controller :(

I will try the same scenario in my lab this weekend.