Retrieving trust forest data #176
Comments
|
I have found something. I need to put in my nslookup rdc02.dev.com 172.16.186.168
Server: 172.16.186.168
Address: 172.16.186.168#53
Non-authoritative answer:
Name: rdc02.dev.com
Address: 172.16.186.160
|
This was referenced Apr 28, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
In an environment where DMZDC01.HOME.COM has a trust relationship like this:
It is possible to retrieve all
dev.comdata from thedc01while runningSharpHound:But with
bloodhoun-pythonit fails:DEBUG: Authentication: NT hash DEBUG: Resolved collection methods: rdp, objectprops, acl, session, container, loggedon, trusts, psremote, group, localadmin, dcom DEBUG: Using DNS to retrieve domain information DEBUG: Querying domain controller information from DNS DEBUG: Using domain hint: dev.com INFO: Found AD domain: dev.com DEBUG: Found primary DC: rdc02.dev.com DEBUG: Found Global Catalog server: rdc02.dev.com DEBUG: Found Global Catalog server: cdc07.ops.dev.com DEBUG: Found KDC for enumeration domain: rdc02.dev.com INFO: Getting TGT for user DEBUG: Trying to connect to KDC at rdc02.dev.com:88 DEBUG: Traceback (most recent call last): File "/home/kali/git/public/BloodHound.py/.venv/lib/python3.11/site-packages/impacket/krb5/kerberosv5.py", line 61, in sendReceive af, socktype, proto, canonname, sa = socket.getaddrinfo(targetHost, port, 0, socket.SOCK_STREAM)[0] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.11/socket.py", line 962, in getaddrinfo for res in _socket.getaddrinfo(host, port, family, type, proto, flags): ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ socket.gaierror: [Errno -2] Name or service not known During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/home/kali/git/public/BloodHound.py/bloodhound/ad/authentication.py", line 273, in get_tgt tgt, cipher, _, session_key = getKerberosTGT( ^^^^^^^^^^^^^^^ File "/home/kali/git/public/BloodHound.py/.venv/lib/python3.11/site-packages/impacket/krb5/kerberosv5.py", line 185, in getKerberosTGT r = sendReceive(message, domain, kdcHost) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/kali/git/public/BloodHound.py/.venv/lib/python3.11/site-packages/impacket/krb5/kerberosv5.py", line 65, in sendReceive raise socket.error("Connection error (%s:%s)" % (targetHost, port), e) OSError: [Errno Connection error (rdc02.dev.com:88)] [Errno -2] Name or service not known WARNING: Failed to get Kerberos TGT. Falling back to NTLM authentication. Error: [Errno Connection error (rdc02.dev.com:88)] [Errno -2] Name or service not known DEBUG: Using LDAP server: rdc02.dev.com DEBUG: Using base DN: DC=dev,DC=com DEBUG: Using kerberos KDC: rdc02.dev.com DEBUG: Using kerberos realm: dev.COM INFO: Connecting to LDAP server: rdc02.dev.com DEBUG: Using protocol ldap DEBUG: Authenticating to LDAP server with NTLM ERROR: Failure to authenticate with LDAP! Error 8009030C: LdapErr: DSID-0C0906C2, comment: AcceptSecurityContext error, data 52e, v4563 Traceback (most recent call last): File "<string>", line 1, in <module> File "/home/kali/git/public/BloodHound.py/bloodhound/__init__.py", line 343, in main bloodhound.run(collect=collect, File "/home/kali/git/public/BloodHound.py/bloodhound/__init__.py", line 78, in run self.pdc.prefetch_info('objectprops' in collect, 'acl' in collect, cache_computers=do_computer_enum) File "/home/kali/git/public/BloodHound.py/bloodhound/ad/domain.py", line 572, in prefetch_info self.get_objecttype() File "/home/kali/git/public/BloodHound.py/bloodhound/ad/domain.py", line 261, in get_objecttype self.ldap_connect() File "/home/kali/git/public/BloodHound.py/bloodhound/ad/domain.py", line 72, in ldap_connect ldap = self.ad.auth.getLDAPConnection(hostname=self.hostname, ip=ip, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/kali/git/public/BloodHound.py/bloodhound/ad/authentication.py", line 175, in getLDAPConnection raise CollectionException( bloodhound.ad.utils.CollectionException: Could not authenticate to LDAP. Check your credentials and LDAP server requirements.Using
klistafterSharpHoundexecution result in created tickets:Maybe
bloodhound.pyneeds to forge the same tickets.The text was updated successfully, but these errors were encountered: