Skip to content
This repository has been archived by the owner on Dec 6, 2023. It is now read-only.

Kerberos ticket loading support on Windows #45

Closed
maaaaz opened this issue Nov 25, 2015 · 1 comment
Closed

Kerberos ticket loading support on Windows #45

maaaaz opened this issue Nov 25, 2015 · 1 comment

Comments

@maaaaz
Copy link

maaaaz commented Nov 25, 2015

Hello @byt3bl33d3r,

As I'm going through the new features you added and how could they be used from Windows hosts, I would like to know if you wanted to add a Windows support for the kerberos ticket loading (--kerb and -k).
The thing is you actually rely on impacket's implementation which loads $KRB5CCNAME env variable to find tickets, which is obviously related to the Unix world.

So my point is to allow a user who whould have grabbed tickets with mimikatz to be able to replay them through crackmapexecwin. That link gives the modus operandi:

  • The attacker should first convert it with kirbikator
  • The attacker should then use a Unix/linux client to load it: this is the step I want to avoid as I'd like to load it from Windows.

By quickly looking at impacket code, it could be possible to achieve this by calling CCache.loadFile() with a custom Windows path (user specified).
What do you think about ?

I'm aware that this might rather be an impacket issue, so I'll also post it on their github section

Cheers.

@byt3bl33d3r
Copy link
Owner

Closing since I've decided I'm not going to be supporting windows for a multitude of reasons

fpreynaud pushed a commit to fpreynaud/CrackMapExec that referenced this issue Jul 21, 2023
fpreynaud pushed a commit to fpreynaud/CrackMapExec that referenced this issue Jul 21, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants