search

nccgroup / Berserko

Burp Suite extension to perform Kerberos authentication
GNU Affero General Public License v3.0
104 stars 15 forks source link

doesn't seem to work with 1.7.21 #2

Open wwowwo opened 7 years ago

wwowwo commented 7 years ago

Provides an error for that the KDC appears to be correct but the DNS name is not.

rtt-ncc commented 7 years ago

Hi

I assume you mean you got this error message? "Failed to contact Kerberos service - error code 68 suggests that KDC is valid but domain DNS name is wrong"

This means that the "Domain DNS Name" you have specified isn't the correct one for this KDC Host (domain controller).

An easy way to find the correct DNS name for the domain is using nmap's smb-os-discovery script, e.g.:

nmap -sC -p445 --script=smb-os-discovery -n -Pn [kdc_host_here]

The "Domain name" field in the script output should contain the value you need.

If that doesn't work let me know...

wwowwo commented 7 years ago

Works! Thank you!