BloodHound.py
BloodHound.py copied to clipboard
Added LDAP Channel Binding Support
- Added ldap channel binding
- Set the default protocol in domain.py to match that of authentication.py
- Removed a line in authentication.py that recreates the conn variable before binding which seemed unnecessary
Once added, I was able to fully enumerate a domain with ldap channel signing enforced as intended.
Maybe double check the removal of line 107 of bloodhound/ad/authentication.py where I got rid of the "additional" conn variable creation. It seemed redundant, but you be the judge. If it needs to stay then the ldap channel binding arg needs to be passed there as well.
i merged this manually and it solved my problem. can we get this into the main line?
Yes worked for me as well, but needed a small fix for Kerberos authentication https://github.com/deadjakk/BloodHound.py/pull/1
@deadjakk this is badass. thanks for this 👍
hey, due to diverging changes I have merged this in manually, with some fixes. Channel binding is now supported with both NTLM and Kerberos. Thanks for the contribution!