smartbrute icon indicating copy to clipboard operation
smartbrute copied to clipboard

Improvements and bugfixes for Kerberos-only environments

Open SimonWessling opened this issue 3 years ago • 1 comments

When using smartbrute with Kerberos authentication, smartbrute tries to look up the KDC hostname (get_machine_name()), which it requires to construct the SPN, via SMB anonymous login. This leads to an unhandled exception in environments where NTLM authentication is disabled. I added a command line argument --dc-host to specify the KDC host directly, eliminating the lookup via SMB. This is similar to the approach taken in some impacket example scripts.

While I was at it, I also fixed a small bug and added a hint to use --use-ldaps when Kerberos login over plain LDAP fails.

SimonWessling avatar Sep 09 '22 17:09 SimonWessling

Thank you for this addition, can you resolve the conflicts that probably raised with the last merge?

ShutdownRepo avatar Dec 15 '22 16:12 ShutdownRepo