Skip to content

Results not detecting valid login and reporting it as logon failure #17

@hackerlawyer

Description

@hackerlawyer

SMB spraying performed with valid usernames and known valid password returned logon failure despite being accurate and reconfirmed with crackmapexec as valid login. Trying to work this tool into my pen test arsenal to automate password spraying but looking like manually spraying with cme is best as this tool is returning false negatives. Please advise as to potential problems/solutions and whether you have seen this behavior before. Thank you. Maybe it only returns as logon successful if ADMIN$ share is accessible?
Its honestly a real bummer as this tool gave me hope for not having to password spray manually anymore. Could have been a great improvement in testing quality for my clients as well.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions