Coercer icon indicating copy to clipboard operation
Coercer copied to clipboard

Published 20 hours ago • verified publisher icon p0dalirius

[bug] SMB SessionError: STATUS_PIPE_DISCONNECTED

Open jsdhasfedssad opened this issue 2 years ago • 1 comments

Hi,

I love your tool and I have used it a lot! However, today during testing in my AD lab I suddenly get the error "SMB SessionError: STATUS_PIPE_DISCONNECTED" when attempting to coerce anonymously.

Anonymous coercing has worked before. If I try authenticated coercing against the same DC it partially works. Also note that coercing using MS-RPRN.exe, and I assume authentication via Kerberos, against the same DC still works... As you can see the pipe LSARPC is accessible.

Restarting dc1.adlab.local (10.0.0.200) does not help.

coerce1 coerce3 coerce2

jsdhasfedssad avatar Aug 20 '22 17:08 jsdhasfedssad

Hi @jsdhasfedssad,

Thanks for reporting this bug. It's indeed not supposed to happen and I'll take care of it soon!

Best regards,

p0dalirius avatar Aug 20 '22 18:08 p0dalirius