Hey guys! need some help.
When i run the cmd to give me Dc rights using powerview got the following error:
Warning: Error granting principal xxxxxxxxxxxxx xxxx 'Dc’ on DC=htb,DC=local : Exception calling “CommitChanges” with “0” argument(s): "A constraint violation occurred
the comand to add the ACL seams to be ok, using evil-***rm
any idias?
Thanks.
I’m still stuck with the new user. I’m able to login, but there’s nothing I can do because the lack of permissions. Neither nj*y, nor po*****p, nothing has permissions enough to get anything. Any nudge?
@Nt3c said:
Hey guys! need some help.
When i run the cmd to give me Dc rights using powerview got the following error:
Warning: Error granting principal xxxxxxxxxxxxx xxxx 'Dc’ on DC=htb,DC=local : Exception calling “CommitChanges” with “0” argument(s): "A constraint violation occurred
the comand to add the ACL seams to be ok, using evil-***rm
any idias?
Thanks.
For me powerview didn’t do the trick. But i was able to do it with a tool remotely from linux.
@BadRain said:
I’m still stuck with the new user. I’m able to login, but there’s nothing I can do because the lack of permissions. Neither nj*y, nor po*****p, nothing has permissions enough to get anything. Any nudge?
That didn’t work for me neither. I used a tool that will to the dog walk remotely.
Am new to windows boxes, have tried running enum4linux and obtained some users but can’t seem to find any creds. Have also tried the recommended impacket scripts but just get these errors: “Kerberos SessionError: KDC_ERR_WRONG_REALM(Reserved for future use)”
Any help on getting initial foothold would be appreciated (: Thanks!
If you are using an ip, maybe there is something you can do to use a name instead
Thanks @MactheDice , managed to figure out the semantics of using the impacket tool. There’s a flag that can also be used if I wanted to use ip instead of a name
I am stuck on this one with getting a working user. Was able to get the pw for s**-o and can see some more info in smb, but trying to move past this I am not finding the right path. GSPN.py keeps returning ‘No entries found’ which has me stuck for that path. I also try g****T.py which works but does not seem to gain me access anywhere else. A pm nudge would be great, I’m fairly new to all this so I am sure I am just missing something.
I’m totally stuck at root… I was able to walk the dog and create a user with the evil thing using Po***Vi** but I can’t log in with that user. Can someone give me a nudge?
It’s a matter of belonging to the right group.
I guess my new user would have to belong to the Se****e A******* group. No idea how to add the user to that group though. I tried it with Add-DomainGroupMember but I get an error saying Access Denied.
(Quote)
I guess my new user would have to belong to the See A*** group. No idea how to add the user to that group though. I tried it with Add-DomainGroupMember but I get an error saying Access Denied.
You need for another group. Check the “DA” path, check s**-a*******’s indirect rights and you will find the proper group.
Finally rooted. However, during the process I kept having the same issues that other people mentioned in that SH.ps1 or SH.exe gave absolutely no output. Unfortunately, I didn’t write down how I managed to get it to work. Can anyone help me via PM?