Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows 2012 as domain controller issue #8

Open
CaledoniaProject opened this issue Oct 13, 2016 · 1 comment
Open

Windows 2012 as domain controller issue #8

CaledoniaProject opened this issue Oct 13, 2016 · 1 comment

Comments

@CaledoniaProject
Copy link

CaledoniaProject commented Oct 13, 2016

Have you tried to run ranger against a windows 2012 domain controller?

I got an error like this,

[!] An error occurred recording the hash (Unknown User):xxxx from secrets-dump: 'NoneType' object has no attribute 'split'

The command I used,

ranger -u Administrator -p xxxx -d corp.xxxx.com -t 172.16.177.130 --secrets-dump
@CaledoniaProject
Copy link
Author

CaledoniaProject commented Oct 13, 2016

# ranger -u Administrator -p xxxx -d corp.xxxx.com -t 172.16.177.130 --secrets-dump
[*] Attempting to access the system 172.16.177.130 with, user: Administrator pwd: xxxx domain: corp.xxxx.com at: 2016-10-13-12:47:04
 0000   01 00 00 00 35 B8 12 5E  85 59 5B 14 C5 8B 87 38   ....5..^.Y[....8
 0010   87 63 45 D6 CB F6 33 F9  78 4B 1B 3D 07 A7 0F 92   .cE...3.xK.=....
 0020   4D 5B 28 EA DF 93 36 64  7D 31 2D 9F               M[(...6d}1-.
 0000   A9 33 79 02 EE A1 7F 12  07 4D 8A 07 5D 5B 7C 3F   .3y......M..][|?
 0010   2C 1C A3 36 08 D2 83 2B  F4 52 BC 5B 74 1E E5 45   ,..6...+.R.[t..E
 0020   5D DF 80 9A 2E FE F3 92  58 16 4B 9A 73 FD 8E 60   ].......X.K.s..`
 0030   D6 EC 94 38 CC 42 50 34  00 32 2D 77 85 62 A6 85   ...8.BP4.2-w.b..
[*] Cleaning up...
[*] [!] An error occurred recording the hash (Unknown User):xxxx from secrets-dump: 'NoneType' object has no attribute 'split'
[*] [*] Wrote results to the following location /opt/ranger/results/secrets_dump/secrets_dump_172.16.177.130
[*] [+] workgroup\guest has access to system 172.16.177.130
[*] [+][+] Extracted the following hash Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
[+] Wrote the saved credential matrix to: /opt/ranger/results/credentials/credential_matrix
[+] Wrote the remaining targets to the following file: /opt/ranger/log/remaining_targets.log
[+] Wrote the cleartext credentials to the following file: /opt/ranger/results/credentials/cleartext
[+] Wrote the pwdump credentials to the following file: /opt/ranger/results/credentials/pwdump
[+] Wrote the IP to account access mapping to the following file: /opt/ranger/results/credentials/access_to
[+] Wrote the current user's session locations to the following file: /opt/ranger/results/credentials/logged_in_to

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant