New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add SAN with UPN by default when doing shadow credentials #1875

Open

rtpt-romankarwacik wants to merge 1 commit into fortra:master from rtpt-romankarwacik:add-SAN-field-by-default

Contributor

rtpt-romankarwacik commented Jan 20, 2025

This way, the pfx created using shadow-credentials can be instantly used with certipy without specifying the domain, e.g. before:

$ certipy auth -pfx withoutSAN.pfx
Certipy v4.8.2 - by Oliver Lyak (ly4k)

[!] Could not find identification in the provided certificate
[-] Username or domain is not specified, and identification information was not found in the certificate

After:

$ certipy auth -pfx withSAN.pfx
Certipy v4.8.2 - by Oliver Lyak (ly4k)

[*] Using principal: user$@domain.local
[*] Trying to get TGT...
[*] Got TGT
[*] Saved credential cache to 'user.ccache'
[*] Trying to retrieve NT hash for 'user$'
[*] Got hash for 'user$@domain.local': aad3b435b51404eeaad3b435b51404ee:REDACTED


          add SAN with UPN by default when doing shadow credentials

e2978a8

anadrianmanrique self-assigned this

anadrianmanrique added the medium label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

medium