Skip to content

Commit 99da91e

Browse files
committed
Adjust golden ticket creation to force params when SYSTEM
1 parent 894ed49 commit 99da91e

File tree

1 file changed

+4
-3
lines changed
  • lib/rex/post/meterpreter/ui/console/command_dispatcher

1 file changed

+4
-3
lines changed

lib/rex/post/meterpreter/ui/console/command_dispatcher/kiwi.rb

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -166,7 +166,6 @@ def golden_ticket_create_usage
166166
# Invoke the golden kerberos ticket creation functionality on the target.
167167
#
168168
def cmd_golden_ticket_create(*args)
169-
return unless check_is_domain_user
170169

171170
if args.include?("-h")
172171
golden_ticket_create_usage
@@ -210,6 +209,8 @@ def cmd_golden_ticket_create(*args)
210209

211210
# is anything else missing?
212211
unless opts[:domain_sid] && opts[:krbtgt_hash]
212+
return unless check_is_domain_user('Unable to run module as SYSTEM unless krbtgt and domain sid are provided')
213+
213214
# let's go discover it
214215
krbtgt_username = opts[:user].split('\\')[0] + '\\krbtgt'
215216
dcsync_result = client.kiwi.dcsync_ntlm(krbtgt_username)
@@ -400,9 +401,9 @@ def cmd_creds_kerberos(*args)
400401

401402
protected
402403

403-
def check_is_domain_user
404+
def check_is_domain_user(msg='Running as SYSTEM, function will not work.')
404405
if client.sys.config.is_system?
405-
print_warning('Running as SYSTEM, function will not work.')
406+
print_warning(msg)
406407
return false
407408
end
408409

0 commit comments

Comments
 (0)