admin/Pennyw0rth-NetExec
1
0
Fork 0
mirror of https://github.com/Pennyw0rth/NetExec synced 2026-06-06 16:34:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Enable asreproast with anonymous ldap logins

Browse Source
This commit is contained in:
Alexander Neff
2025-05-29 19:15:19 -04:00
parent 71ccfd930d
commit ad637e1c8e
1 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nxc/protocols/ldap.py
+1 -4
View File
@@ -483,7 +483,7 @@ class ldap(connection):
self.password = password
self.domain = domain
if self.password == "" and self.args.asreproast:
if self.username and self.password == "" and self.args.asreproast:
hash_tgt = KerberosAttacks(self).get_tgt_asroast(self.username)
if hash_tgt:
self.logger.highlight(f"{hash_tgt}")
@@ -965,9 +965,6 @@ class ldap(connection):
self.logger.highlight(f"{user.get('sAMAccountName', ''):<30}{pwd_last_set:<20}{user.get('badPwdCount', ''):<9}{user.get('description', '')}")
def asreproast(self):
if self.password == "" and self.nthash == "" and not self.kerberos:
return False
# Building the search filter
search_filter = f"(&(UserAccountControl:1.2.840.113556.1.4.803:={UF_DONT_REQUIRE_PREAUTH})(!(UserAccountControl:1.2.840.113556.1.4.803:={UF_ACCOUNTDISABLE}))(!(objectCategory=computer)))"
resp = self.search(search_filter, attributes=["sAMAccountName"], sizeLimit=0)