aardwolf icon indicating copy to clipboard operation
aardwolf copied to clipboard

Wrong version of windows

Open mpgn opened this issue 5 months ago • 3 comments

Hello hello,

I'm using get_extra_info() to get info about the remote host, i get the following result against a DC 2025 :)

{'domainname': 'GOTHAM', 'computername': 'DC01', 'dnscomputername': 'DC01.gotham.city', 'dnsdomainname': 'gotham.city', 'local_time': datetime.datetime(2025, 7, 7, 17, 1, 40, 829143), 'dnsforestname': 'gotham.city', 'os_build': 26100, 'os_guess': 'Windows 10 or Windows Server 2016', 'os_major_version': 'WINDOWS_MAJOR_VERSION_10', 'os_minor_version': 'WINDOWS_MINOR_VERSION_0'}

26100 is for windows 11 / Server 2025, did i forget to update something ? :)

https://en.wikipedia.org/wiki/Windows_11_version_history

(i'm on latest version of aardwolf)

mpgn avatar Jul 07 '25 17:07 mpgn

I see what you mean but also:
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-nlmp/a211d894-21bc-4b8b-86ba-b83d0c167b00?redirectedfrom=MSDN#Appendix_A_33

skelsec avatar Jul 10 '25 18:07 skelsec

I'm open to suggestions, but don't wanna change the current logic as it's per NTLM docs.

skelsec avatar Jul 10 '25 18:07 skelsec

I mean, the doc is from 04/27/2022 — Windows Server 2025 wasn’t even a thing back then, so it’s no surprise it’s not listed. Since when has Microsoft documentation been a reliable source anyway? ^^

mpgn avatar Jul 13 '25 21:07 mpgn