fist0urs / kerberom Goto Github PK

Adding such an option would permit using Kerberom while target DC has not the same time. This would be usefull while using Kerberom through proxy (like proxychain)

Example: In kerberom.py

        WRITE_STDERR(G + "\nAsking " + B + '\'' + DC_addr\
                           + '\'' + G + " for a TGT\n" + W)

        WRITE_STDERR('  [+] Building AS-REQ for %s...' % DC_addr)

Hey,

For some reason the tool pulls out the first hash fine, but then i get the error below and it dies, any ideas?:

running latest version on Kali 64 rolling ed.
thanks

[+] Building TGS-REQ for SPN 'mssqlsvc/xxxxx:1267' and account 'xxxxbackup'... Done!
[+] Sending TGS-REQ to xxxxxx.com... Done!
[+] Receiving TGS-REP from xxxxxx.com... Done!
[+] Parsing TGS-REP from xxxx..com..Traceback (most recent call last):
File "kerberom.py", line 557, in
DataSubmitted.TGS_attack()
File "kerberom.py", line 204, in TGS_attack
tgs_rep = parse_TGS_REP(sock, subkey, spn, samaccountname, self.DC_addr)[0]
File "kerberom.py", line 407, in parse_TGS_REP
tgs_rep, tgs_rep_enc = decrypt_tgs_rep(data, subkey)
File "/root/tools/kerberos/kerberom/modules/rom/krb5.py", line 443, in decrypt_tgs_rep
return _decrypt_rep(data, key, TgsRep(), EncTGSRepPart(), 9) # assume subkey
File "/root/tools/kerberos/kerberom/modules/rom/krb5.py", line 430, in _decrypt_rep
rep = decode(data, asn1Spec=spec)[0]
File "/usr/lib/python2.7/dist-packages/pyasn1/codec/ber/decoder.py", line 825, in call
stGetValueDecoder, self, substrateFun
File "/usr/lib/python2.7/dist-packages/pyasn1/codec/ber/decoder.py", line 50, in valueDecoder
value, _ = decodeFun(head, asn1Spec, tagSet, length)
File "/usr/lib/python2.7/dist-packages/pyasn1/codec/ber/decoder.py", line 831, in call
'%s not in asn1Spec: %s' % (tagSet, asn1Spec)
pyasn1.error.PyAsn1Error: [0:32:16]+[64:32:30] not in asn1Spec: TgsRep(componentType=NamedTypes(NamedType('pvno', Integer(tagSet=TagSet((), Tag(tagClass=0, tagFormat=0, tagId=2), Tag(tagClass=128, tagFormat=0, tagId=0)))), NamedType('msg-type', Integer(tagSet=TagSet((), Tag(tagClass=0, tag

Add Windows support (py2exe could be used)