From 905f63677c64ab615cd147431beea2d06fd6c947 Mon Sep 17 00:00:00 2001 From: mpgn <5891788+mpgn@users.noreply.github.com> Date: Tue, 7 Jan 2025 16:05:12 +0100 Subject: [PATCH] fix pfx auth on non dc --- nxc/helpers/pfx.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/nxc/helpers/pfx.py b/nxc/helpers/pfx.py index 4ec974967..4ad9dd7db 100644 --- a/nxc/helpers/pfx.py +++ b/nxc/helpers/pfx.py @@ -509,7 +509,7 @@ def pfx_auth(self): req = ini.build_asreq(self.domain, username) self.logger.info("Requesting TGT") - sock = KerberosClientSocket(KerberosTarget(self.host)) + sock = KerberosClientSocket(KerberosTarget(self.domain)) try: res = sock.sendrecv(req) except Exception as e: @@ -527,7 +527,7 @@ def pfx_auth(self): creds = ccache.getCredential(principal) if creds is not None: tgt = creds.toTGT() - dumper = GETPAC(username, self.domain, self.host, key, tgt) + dumper = GETPAC(username, self.domain, self.domain, key, tgt) nthash = dumper.dump() if not self.kerberos: self.hash_login(self.domain, username, nthash)