dev2null
I'm getting the same issue, with `--TrackComputerCalls ` flag set, it always tells you "PortNotOpen", Examining Wireshark I see sth like `Error: Unknown DOS error 0x00020000` or `STATUS_PIPE_NOT_AVAILABLE`. Regarding the...
I tried to decrypt this blob but I'm not sure how I can handle the decrypted data: ``` [-] Data: 000000001200000023946A4242359A4EF5D07C6B14C425F402FE7ADD8A32BF9E08B1E00C1C999EBE61F52CFF442118EDAC511240ACCB2942D9C753DA8471F1C9B7C4449D6D80B5C15030A1C49ABEA6CE9DBE5B78A58D5FD7A19C38286300A8511CBAE63EEAB0B7670B652D7299122C2859F879111E1913857F90CE08B87714D8E4FB324DFC36E34806D313C0AFFC3B8EA6A8D0E300000000 [-] Data Length: 152 [-] Cred Data Length: 144...
Yes, but what I meant is that `01100800CCCCCCCC600...` is something I should get after decrypting `SerializedData`, see `encCredData ` in [Rubeus's implementaion of PacCredentialInfo](https://github.com/GhostPack/Rubeus/blob/3620814cd2c5f05e87cddd50211197bd932fec51/Rubeus/lib/krb_structures/pac/PacCredentialInfo.cs#L52). The `encCredData ` is equivalent to...
```csharp KrbEncTicketPart ticketDecrypted = tgsRep.Ticket.EncryptedPart.Decrypt( KerberosRun.U2USessionKey.AsKey(), KeyUsage.Ticket, (ReadOnlyMemory t) => KrbEncTicketPart.DecodeApplication(t)); var pac = Helper.GetPAC(ticketDecrypted); Console.WriteLine("[-] PacCredentialInfo Data:"); Console.WriteLine(" Data: {0}", (BitConverter.ToString(pac.CredentialType.Marshal().ToArray())).Replace("-", "")); Console.WriteLine(" Length: {0}", pac.CredentialType.Marshal().ToArray().Length); var credSerialData =...
From AS reply. Decrypt the ticket enc part and get the key Get Outlook for iOS ________________________________ From: Steve Syfuhs ***@***.***> Sent: Tuesday, September 20, 2022 1:11:54 AM To: dotnet/Kerberos.NET...
Yeah, I always make mistakes... I thought ASREP key is asRep.Key... Now it works perfectly Thank you very much for your help! Really appreicate it!
Maybe as a reference for this feature request (decrypted `SerializedData` structure), at least it works for me ;) ```csharp public class PacCredentialData : INdrStruct { public void Marshal(NdrBuffer buffer) {...
Hi, are you running as domain context? check with `whoami` or `[adsi]""`
Hey not sure what you mean, but you can just redirect output to a file `.\ADCollector.exe > results.txt`
Hey, you need to learn how to compile a project, get Visual Studio first 🤣 Get Outlook for iOS ________________________________ From: Nikolara97 ***@***.***> Sent: Saturday, October 14, 2023 5:17:02 PM...