Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GetUserSPNs invalidCredentials error #1872

Open
init5-SF opened this issue Jan 12, 2025 · 0 comments
Open

GetUserSPNs invalidCredentials error #1872

init5-SF opened this issue Jan 12, 2025 · 0 comments
Assignees
Labels
in review This issue or pull request is being analyzed

Comments

@init5-SF
Copy link

Configuration

impacket version: v0.12.0
Python version: 3.12.8
Target OS: Windows Server 2022 Datacenter
Attacking OS: Kali

Debug Output With Command String

Buggy syntax

└─# GetUserSPNs.py -debug bank.local/lowshell:Passw0rd1@192.168.194.129
Impacket v0.12.0 - Copyright Fortra, LLC and its affiliated companies 

[+] Impacket Library Installation Path: /usr/local/lib/python3.12/dist-packages/impacket
[+] Connecting to bank.local, port 389, SSL False
Traceback (most recent call last):
  File "/usr/local/bin/GetUserSPNs.py", line 577, in <module>
    executer.run()
  File "/usr/local/bin/GetUserSPNs.py", line 274, in run
    ldapConnection.login(self.__username, self.__password, self.__domain, self.__lmhash, self.__nthash)
  File "/usr/local/lib/python3.12/dist-packages/impacket/ldap/ldap.py", line 365, in login
    raise LDAPSessionError(
impacket.ldap.ldap.LDAPSessionError: Error in bindRequest -> invalidCredentials: 8009030C: LdapErr: DSID-0C090815, comment: AcceptSecurityContext error, data 52e, v4f7c
[-] Error in bindRequest -> invalidCredentials: 8009030C: LdapErr: DSID-0C090815, comment: AcceptSecurityContext error, data 52e, v4f7c

Working syntax

└─# GetUserSPNs.py -debug bank.local/lowshell  -dc-ip 192.168.194.129 
Impacket v0.12.0 - Copyright Fortra, LLC and its affiliated companies 

[+] Impacket Library Installation Path: /usr/local/lib/python3.12/dist-packages/impacket
Password:
[+] Connecting to 192.168.194.129, port 389, SSL False
[+] Total of records returned 4
ServicePrincipalName  Name           MemberOf                                  PasswordLastSet             LastLogon  Delegation 
--------------------  -------------  ----------------------------------------  --------------------------  ---------  ----------
ADM/somehost.local    allix.janella  CN=wifiAdmins,OU=testOU,DC=bank,DC=local  2024-12-22 19:54:32.373892  <never>   

Additional context

I could swear this syntax used to work before, no idea what changed! Am I missing something?

@anadrianmanrique anadrianmanrique added the in review This issue or pull request is being analyzed label Jan 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in review This issue or pull request is being analyzed
Projects
None yet
Development

No branches or pull requests

3 participants