Skip to content

Commit 9d3f34e

Browse files
authored
Merge pull request Pennyw0rth#711 from t94j0/main
Update kerberoast command output to be idiomatic
2 parents 6decd7f + 73dc411 commit 9d3f34e

1 file changed

Lines changed: 2 additions & 3 deletions

File tree

nxc/protocols/ldap.py

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1050,7 +1050,7 @@ def kerberoasting(self):
10501050
self.logger.debug(f"Exception: {e}", exc_info=True)
10511051
self.logger.fail(f"Principal: {downLevelLogonName} - {e}")
10521052
else:
1053-
self.logger.fail(f"Error retrieving TGT for {self.username}\\{self.domain} from {self.kdcHost}")
1053+
self.logger.fail(f"Error retrieving TGT for {self.domain}\\{self.username} from {self.kdcHost}")
10541054

10551055
def query(self):
10561056
"""
@@ -1117,8 +1117,7 @@ def printTable(items, header):
11171117
f"(!(UserAccountControl:1.2.840.113556.1.4.803:={UF_ACCOUNTDISABLE})))")
11181118
# f"(!(UserAccountControl:1.2.840.113556.1.4.803:={UF_SERVER_TRUST_ACCOUNT})))") This would filter out RBCD to DCs
11191119

1120-
attributes = ["sAMAccountName", "pwdLastSet", "userAccountControl", "objectCategory",
1121-
"msDS-AllowedToActOnBehalfOfOtherIdentity", "msDS-AllowedToDelegateTo"]
1120+
attributes = ["sAMAccountName", "pwdLastSet", "userAccountControl", "objectCategory", "msDS-AllowedToActOnBehalfOfOtherIdentity", "msDS-AllowedToDelegateTo"]
11221121

11231122
resp = self.search(search_filter, attributes)
11241123
answers = []

0 commit comments

Comments
 (0)