Rubeus icon indicating copy to clipboard operation
Rubeus copied to clipboard

Problem with s4u altservice outfile

Open TryA9ain opened this issue 3 years ago • 0 comments

i use S4U2self

Rubeus.exe s4u /ticket:1.kirbi /impersonateuser:Administrator /altservice:HOST/win-2008r2-2.missyou.com /domain:missyou.com /dc:dc.missyou.com /outfile:test.kirbi /nowrap /self

outfile

image

I use without adding the /altservice parameter, and the output file name is normal

Rubeus.exe s4u /ticket:1.kirbi /impersonateuser:Administrator /domain:missyou.com /dc:dc.missyou.com /outfile:test.kirbi /nowrap /self

image

but need to execute tgssub again

Rubeus.exe tgssub /altservice:cifs/win-2008.missyou.com /ticket:[email protected] /nowrap

image

The two operations are equivalent, but there is a problem with the output filename output of s4u /altservice . Although it does not affect the use of the final Service Ticket, I think this is a point that can be optimized.

TryA9ain avatar Oct 27 '22 03:10 TryA9ain