ropnop / impacket_static_binaries

Standalone binaries for Linux/Windows of Impacket's examples
Other
702 stars 92 forks source link

[-] SCMR SessionError: code: 0x431 - ERROR_SERVICE_EXISTS - The specified service already exists. #13

Open PolarPeak opened 2 years ago

PolarPeak commented 2 years ago

After the first success, I hit Ctrl+ C and run the prompt again

smbexec_windows.exe -hashes :ae···························· rootkit/administrator@192.168.0.1 Cannot determine Impacket version. If running from source you should at least run "python setup.py egg_info" Impacket v? - Copyright 2020 SecureAuth Corporation

[-] SCMR SessionError: code: 0x431 - ERROR_SERVICE_EXISTS - The specified service already exists.

How can I solve this problem and hope for an early reply

edf437bf4913154ad758aa8bea9312d
JohnnyRad commented 2 years ago

@PolarPeak I cann't build it in linux , what is your host os ?

PolarPeak commented 2 years ago

Windows 10 I have already known the problem. I can log in to the server of the other party through RDP and delete the output file under disk C

Zinou16 commented 2 years ago

I get also this message when running smbexec against the target! Have anybody found the solution?

the message says that the service exists! does the service exist on the kali box or on the target box? and which service is concerned?

image

Zinou16 commented 2 years ago

I've found what the problem was. The service causing the issue is running on the target machine. it's the "BTOBTO" service, created by the smbexec.py script.

From my understanding, this service shouldn't be permanent on the target machine. But for some reason, it was there!

2022-06-03_08h32_35

To fix this issue remove this service using the following command: "sc delete BTOBTO". then restart the system.

WS-G commented 1 year ago

Wanted to give an update to anyone having the same problem. As mentioned above "BTOBTO" is the default service name created. If it already exists then you can not use it again. If you use the -service-name argument you can supply your own service name, you can bypass the error. Example: smbexec.py domain.local/username:password@10.0.2.45 -service-name 123abc