SpecterOps / SpecterOps/SharpHound
DsGetDcNameWrapper Error, retrieving informations for GetDomain() call in SH 2.5.8
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 1.3k
- Forks
- 266
- Avg merge
- 2d 7h
- Merged PRs (30d)
- 3
Description
Hi,
Sorry in advance if my explanations are not clear, its my first Issue, ever.
When i run SH 2.5.8 on a non linked domain trough LDAPS i got a GetDomain call failed at GetDomainsForEnumeration process.
Even if i specified the PDC as --domaincontroller, it seems that DsGetDcNameWrapper fail because DsGetDcName get a default null argument for computerName, resulting as DsGetDcName giving num 1355 (0x0000054B)
If i force the computerName parameter for DsGetDcName in DsGetDcNameWrapper at the process of GetDomainsForEnumeration, to be my --domaincontroller PDC argument, the process context becomes valid and Sharphound can continue his enumeration.
The error seems to continue after that, when processing ACE on each computer "the specified domain didn't exist." for GetDomain().
i am waiting now for SH to finish.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the failure on a non-linked domain over LDAPS using --domaincontroller, then inspect DsGetDcNameWrapper during GetDomainsForEnumeration and the later GetDomain() ACE processing. Compare the null computerName behavior with the reported PDC workaround. Done means domain enumeration and ACE processing complete without the reported domain-controller or missing-domain errors.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100