Attempt to resolve and open target user; abort if not found or not accessible. Preventing for trying to change (failed: rpc_x_bad_stub_data)

Author: termanix

nxc/modules/change-password.py

@@ -129,7 +129,7 @@ def on_login(self, context, connection):
     def _smb_samr_change(self, context, connection, target_username, target_domain, oldHash, newPassword, newHash):
         # Reset the password for a different user
         if target_username != connection.username:
-            user_handle = self._hSamrOpenUser(connection, target_username)
+            if not (user_handle := self._hSamrOpenUser(connection, target_username)): return False
             samr.hSamrSetNTInternal1(self.dce, user_handle, newPassword, newHash)
             context.log.success(f"Successfully changed password for {target_username}")
         else:
@@ -139,7 +139,7 @@ def _smb_samr_change(self, context, connection, target_username, target_domain,
                 samr.hSamrUnicodeChangePasswordUser2(self.dce, "\x00", target_username, self.oldpass, newPassword, "", oldHash)
             else:
                 # Change the password with new hash
-                user_handle = self._hSamrOpenUser(connection, target_username)
+                if not (user_handle := self._hSamrOpenUser(connection, target_username)): return False
                 samr.hSamrChangePasswordUser(self.dce, user_handle, self.oldpass, "", oldHash, "aad3b435b51404eeaad3b435b51404ee", newHash)
                 context.log.highlight("Note: Target user must change password at next logon.")
             context.log.success(f"Successfully changed password for {target_username}")