Printer bug doesn't work about krbrelayx HOT 6 CLOSED

It only authenticates with NTLM, which indicates that there is no SPN set for the cifs/attacker.test.com hostname. You probably skipped the step where you'd need to add an SPN for that host as well.

from krbrelayx.

In your blog, wrote need SPN with service HOST/attacker.test.com;
For me now worked with HOST, but i get one more question;
I usage printer bug versus primary-dc.test.com
Krbrelayx output:
Got ticket for primary-dc.test.com [[email protected]]
But if i'am usage versus secondary-dc.test.com
Krbrelayx output
SMBD: receiver connection from "ip address"
Delegate info not set, cannot extract ticket!
Make sure the account you use has unconstrained delegation rights.

secondary-dc.test.com=Windows 2012 server
primary-dc.test.com = Windows 2012 server
I checked , both dc have unconstrained delegation;

from krbrelayx.

I'm not sure what would cause that but for some reason the secondary DC does not think your attacker account has unconstrained delegation.

from krbrelayx.

Great thanks; Last question )))
If i'am usage printerbug.py versus Windows service 2008 sp2
Output:
[-] SMB SessionError: STATUS_OBJECT_NAME_NOT_FOUND(The object name is not found.)
Traceback (most recent call last):
File "printerbug.py", line 198, in
main()
File "printerbug.py", line 191, in main
lookup.dump(remote_name)
File "printerbug.py", line 77, in dump
self.lookup(rpctransport, remote_host)
File "printerbug.py", line 87, in lookup
dce.connect()
File "/usr/local/lib/python2.7/dist-packages/impacket/dcerpc/v5/rpcrt.py", line 800, in connect
return self._transport.connect()
File "/usr/local/lib/python2.7/dist-packages/impacket/dcerpc/v5/transport.py", line 400, in connect
self.__handle = self.__smb_connection.openFile(self.__tid, self.__filename)
File "/usr/local/lib/python2.7/dist-packages/impacket/smbconnection.py", line 547, in openFile
raise SessionError(e.get_error_code(), e.get_error_packet())
impacket.smbconnection.SessionError: SMB SessionError: STATUS_OBJECT_NAME_NOT_FOUND(The object name is not found.)

python rcpdump.py test\administrator@"ip address windows 2008 server"
Protocol [MS-RPRN]: Print System Remote Protocol Presense

from krbrelayx.

Not quite sure what causes this, could be something 2008 specific but I don't have it here to test.

from krbrelayx.

In your blog, wrote need SPN with service HOST/attacker.test.com; For me now worked with HOST, but i get one more question; I usage printer bug versus primary-dc.test.com Krbrelayx output: Got ticket for primary-dc.test.com [[email protected]] But if i'am usage versus secondary-dc.test.com Krbrelayx output SMBD: receiver connection from "ip address" Delegate info not set, cannot extract ticket! Make sure the account you use has unconstrained delegation rights.

secondary-dc.test.com=Windows 2012 server primary-dc.test.com = Windows 2012 server I checked , both dc have unconstrained delegation;

@girlgirlbest how did it work, I have added both HOST and CIFS but did not work for me . Still getting the below error.
Unsupported MechType 'NTLMSSP - Microsoft NTLM Security Support Provider'

from krbrelayx.