ropnop / kerbrute

A tool to perform Kerberos pre-auth bruteforcing
Apache License 2.0
2.57k stars 415 forks source link

[Feature Request] Socks proxy support #32

Open ropnop opened 3 years ago

ropnop commented 3 years ago

Someone on Twitter mentioned that kerbrute doesn't work with proxychains. Would be cool to add a proxy option to kerbrute (not sure how well it would, but worth trying)

tiyeuse commented 3 years ago

Interesting feature. I would like to use kerbrute more but without proxychains it is kinda limited. Is this planned somewhere in the roadmap ? :smiley: Bump on this !

Sia200 commented 3 years ago

I have been tackling this issue, and got kind of a workaround: Changed the default settings for using kerberos with TCP (made UDP optional) here in the picture.

image

after that I expected that Proxychains will work fine, but it didnt. I tried the same thing via windows machine and proxifier, and it worked great! so I will recommend that.

hope someone will find it useful

nodauf commented 2 years ago

For anyone having this use, you can use tun2sock to route the traffic to the destination to the socks proxy. It's a workaround before the feature is implemented

./tun2socks-linux-amd64 -device tun://tun1 -proxy socks5://127.0.0.1:1080
ip link set tun1 up
ip route add <destination network> dev tun1
audibleblink commented 2 years ago

I use graftcp for this. Proxychains uses LDPRELOAD to hijack linked library calls. Go binaries don't use linked libs, so it doesn't work. Graftcp will hijack syscalls, though, to achieve the same result.