Skip cbt check if port explicitly set to 389

This commit is contained in:
Alexander Neff
2025-06-16 14:34:14 -04:00
parent fde3de726e
commit 659c2256dc
2 changed files with 6 additions and 3 deletions
+4 -1
View File
@@ -312,7 +312,10 @@ class ldap(connection):
self.domain = self.targetDomain
self.check_ldap_signing()
self.check_ldaps_cbt()
if getattr(self.args, "port_explicitly_set", False) and self.port == 389:
self.cbt_status = "Unknown"
else:
self.check_ldaps_cbt()
# using kdcHost is buggy on impacket when using trust relation between ad so we kdcHost must stay to none if targetdomain is not equal to domain
if not self.kdcHost and self.domain and self.domain == self.targetDomain:
+2 -2
View File
@@ -1,10 +1,10 @@
from nxc.helpers.args import DisplayDefaultsNotNone
from nxc.helpers.args import DefaultTrackingAction, DisplayDefaultsNotNone
def proto_args(parser, parents):
ldap_parser = parser.add_parser("ldap", help="own stuff using LDAP", parents=parents, formatter_class=DisplayDefaultsNotNone)
ldap_parser.add_argument("-H", "--hash", metavar="HASH", dest="hash", nargs="+", default=[], help="NTLM hash(es) or file(s) containing NTLM hashes")
ldap_parser.add_argument("--port", type=int, default=389, help="LDAP port")
ldap_parser.add_argument("--port", type=int, default=389, action=DefaultTrackingAction, help="LDAP port")
dgroup = ldap_parser.add_mutually_exclusive_group()
dgroup.add_argument("-d", metavar="DOMAIN", dest="domain", type=str, default=None, help="domain to authenticate to")