Comments (4)
Hi,
Ugh, I'm guessing you don't see F91F2FCA9466DCC4 listed in the full hash output? If so, I think I see the bug. I combined the SMB and HTTP NTLM code but it looks like it's only checking the HTTP session table to grab the challenge.
Since it is indeed seeing the challenge in this case, you should be able to just paste it in right after DOMAIN:. I'll get it fixed this weekend. Thanks!
from inveigh.
SMB or HTTP? I'm guessing the challenge is missing? There is something that can cause that with the packet sniffer on the SMB side that I have not been able to track down.
from inveigh.
Hi Kevin,
SMB and the challenge is present in the logfile:
[+] [2020-09-17T07:51:35] SMB(445) negotiation request detected from 192.168.0.10:51243 [+] [2020-09-17T07:51:36] SMB(445) NTLM challenge F91F2FCA9466DCC4 sent to 192.168.0.10:51243 [+] [2020-09-17T07:51:36] SMB(445) NTLMv2 captured for DOMAIN\username from 192.168.0.10(COMPUTERNAME):51243: [redacted]
The attacker's machine is a "Windows Server 2012 R2 Standard" and the tool was launched with admin privs. I can send you a captured hash if need be.
In the other hand using Inveigh-Zero in the same scenario it works like a charm.
Thanks for your support!
from inveigh.
Hi Kevin,
As you said, using the challenge from the logfile the problem has gone. I should have thought about it before!
Thanks for your support and such great tool!
from inveigh.
Related Issues (20)
- Inveigh won't capture hashes HOT 3
- Feature Request - WebDAV Support HOT 2
- Exception Calling "Write" and "Read" After Successful Auth due to Conenction being Forcibly Closed By Remote Host HOT 2
- Feature Request LDAP Queries HOT 1
- relay to multiple targets? HOT 2
- Invoke- commands do not exist HOT 1
- Bug: ADIDNS doesn't work for the System partition.
- error building Inveigh 2.0 HOT 5
- Packet sniffing error detected - System.ArgumentException HOT 4
- Unprivileged spoofing with different IP address HOT 2
- Error running Inveigh.exe 4.5
- Unhandled Exception: System.ArgumentException: Invalid Parameter "LISTENERIP" HOT 4
- Cannot build project HOT 4
- NullReference Exception if IPv6 is disabled HOT 3
- not sure what to do? HOT 1
- Unable to recognize HOT 2
- Documentation is incorrect for "-FileOutput Default=Disabled:" HOT 1
- Defender marks it as "VirTool:MSIL/Denigrate.B!MTB" HOT 1
- Errors on invoke-inveigh HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from inveigh.