search

p0dalirius / Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
https://podalirius.net/
GNU General Public License v2.0
1.76k stars 180 forks source link

[bug] ValueError: too many values to unpack (expected 2) #77

Closed 7MinSec closed 2 months ago

7MinSec commented 3 months ago

Hello,

I'm on a pentest and using Coercer like usual:

coercer.py coerce -u 7ms -p 'pass' -t SOME.VICTIM.IP.ADDY -l LOCAL.KALI.IP.ADDY

When I do I get the error ValueError: too many values to unpack (expected 2).

After some troubleshooting I think it might be the password for my account. Because if I run coercer without the -p and type it in when prompted for it, I still get the same error. But if I type in something like test for the password when prompted for it, I get the (expected) error:

STATUS_LOGON_FAILURE - The attempted logon is invalid. This is either due to a bad username or authentication information.
[+] All done! Bye Bye!

I can't post the password for obvious reasons, but it's 25 characters long, has a mix of upper and lowercase characters and numbers, and ends with an asterisk.

7MinSec commented 3 months ago

I think it is the asterisk! If I use the same password and just remove the asterisk at the end, I get the regular The attempted logon is invalid.

7MinSec commented 3 months ago

Ahhhh sorry for the spam but this may not be pw-related after all. Investigating.

brettgus commented 2 months ago

Also ran into this issue. Noticed it was fixed with issue #65. Updated my install to the most recent version and confirmed that resolved it for me.

7MinSec commented 2 months ago

Thanks for the update @brettgus brettgus, I was running the latest version as of the time this message was posted, BUT what I found out is that the environment I was in had the same internal/external domain name, and I was having sporadic auth issues for ALL Linux tools I was using. Once I edited hosts file to point the domain to an internal domain controller, everything worked fine.

TLDR: it was a "me problem" :-)