Kerberos asrep roasting improvements

[adfoster-r7]

Makes improvements to the asrep roasting module

Bug fix:

[+] [2024.07.22-23:57:58] Workspace:test Beginning step 1/1 Scanning 192.168.123.133-192.168.123.133 - Progress: 0%
[*] [2024.07.22-23:57:58] Using domain: DEMO.LOCAL - 192.168.123.133:88   ...
[*] [2024.07.22-23:57:58] 192.168.123.133 - User: "user1" user not found
[+] [2024.07.22-23:57:58] 192.168.123.133 - User: "vagrant" is present
[!] [2024.07.22-23:57:58] 192.168.123.133:88    - LOGIN FAILED: {:private_data=>nil, :private_type=>:password, :username=>"test_user", :realm_key=>"Active Directory Domain", :realm_value=>"DEMO.LOCAL"} - Unhandled error - scan may not produce correct results: undefined method `find' for nil:NilClass

              etype_entries = pa_data.find {|entry| entry.type == Rex::Proto::Kerberos::Model::PreAuthType::PA_ETYPE_INFO2}
                                     ^^^^^ - 
[+] [2024.07.22-23:57:58] 192.168.123.133 - User: "administrator" is present
[*] [2024.07.22-23:57:58] Complete (0 sessions opened) auxiliary/gather/kerberos_enumusers
[+] [2024.07.22-23:57:58] Workspace:test Task Completed - Progress: 100%

Verification

• Create an ASREP roastable account in your AD environment

• Verify gather/asrep and gather/kerberos_enumusers can detect this user account

[adfoster-r7]

Paper trail: I was aligning this module to more closely align with how login scanners work, where you can provide a user file, or a username.

This might be confusing for the auth scenario to LDAP - we can revert this change if so 👍

[adfoster-r7]

Release Notes

Improves error handling and progress tracking in the auxiliary/gather/kerberos_enumusers and gather/asrep modules