cme ldap -u d.klay -d absolute.htb -k --kdcHost dc.absolute.htb --users

with svc_smb you can access share and get compile.sh and test.exe

(September 25, 2022, 10:51 AM)yumi Wrote: cme ldap  -u d.klay -d absolute.htb -k --kdcHost dc.absolute.htb --users

output nothing just blank

(September 25, 2022, 12:47 PM)user_htb22 Wrote:

(September 25, 2022, 10:51 AM)yumi Wrote: cme ldap  -u d.klay -d absolute.htb -k --kdcHost dc.absolute.htb --users

output nothing just blank

have to put ip in the end

make sure you exported KRB5CCNAME first

(September 25, 2022, 11:47 AM)yumi Wrote: with svc_smb you can access share and get compile.sh and test.exe

which tool did you use? every tool i try just gives me errors with -k and with password

the ldap entry of winrm_user contains msDS-KeyCredentialLink & userCertificate, not sure if it is useful.

X509v3 Extended Key Usage:
    TLS Web Client Authentication, TLS Web Server Authentication
X509v3 Key Usage: critical
    Digital Signature, Key Encipherment

(September 25, 2022, 03:52 PM)Hacker2222 Wrote:

(September 25, 2022, 03:43 PM)Photographer Wrote:

(September 25, 2022, 11:47 AM)yumi Wrote: with svc_smb you can access share and get compile.sh and test.exe

which tool did you use? every tool i try just gives me errors with -k and with password

use crackmapexec without pass ........ or impacket-smbcleint with -no-pass

It does not work for me either.

I keep getting absolute.htb\svc_smb:xxxxxxxxxxx STATUS_ACCOUNT_RESTRICTION

Hello,

Via bloodhound : m.lovegod -- OWNS --> Group Network Audit -- Generic Write --> winrm_user

(September 25, 2022, 04:35 PM)bodiesplus Wrote:

(September 25, 2022, 03:52 PM)Hacker2222 Wrote:

(September 25, 2022, 03:43 PM)Photographer Wrote:

(September 25, 2022, 11:47 AM)yumi Wrote: with svc_smb you can access share and get compile.sh and test.exe

which tool did you use? every tool i try just gives me errors with -k and with password

use crackmapexec without pass ........ or impacket-smbcleint with -no-pass

It does not work for me either.

I keep getting absolute.htb\svc_smb:xxxxxxxxxxx STATUS_ACCOUNT_RESTRICTION

same error

$ impacket-smbclient [email protected] -k -no-pass
Impacket v0.9.24 - Copyright 2021 SecureAuth Corporation

[-] Kerberos SessionError: KDC_ERR_S_PRINCIPAL_UNKNOWN(Server not found in Kerberos database)