CravateRouge / bloodyAD

BloodyAD is an Active Directory Privilege Escalation Framework

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

add computer - LDAPInvalidCredentialsResult - 49 - invalidCredentials - None - ERROR_LOGON_FAILURE: Logon failure: Unknown user name or bad password. - bindResponse - None

embargod opened this issue · comments

Before i add another computers with addcomputer tool (via SAMR and LDAPS)
then get writable works okay
image

But add computer false for reason
image

Sorry, missed screenshot (i tried to add existing computer :D)

Now i try to add COMP1337 and same issue
also with full dn name 'CN=COMP1337,CN=Computers,DC=cringe,DC=corp' doesn't work
image

It's a NTLM logon failure, not related with computer creation. Your AD is refusing NTLM login with pparker with Password1. You can still try with another user and/or another bloody AD functionality such as get object.

get object works, so what happens?
image

I think you should retry add computer

Try adding -s flag before add computer

same error

I have no idea what's going on, you can still try kerberos

for you it works correctly?

It does

okay, so shit happens, i need debug this

Should be fixed with 3bc06f6

Connecting user password was erased by the new password parameter of the computer you added because argparse namespace is flat, there is no distinction between parser arguments and subparsers arguments so if some have the same name it will erase the one in the parser. I had hard time to spot it because I was always testing with the same pass so never saw the issue