{"action":"created","issue":{"url":"https://api.github.com/repos/ropnop/kerbrute/issues/5","repository_url":"https://api.github.com/repos/ropnop/kerbrute","labels_url":"https://api.github.com/repos/ropnop/kerbrute/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/ropnop/kerbrute/issues/5/comments","events_url":"https://api.github.com/repos/ropnop/kerbrute/issues/5/events","html_url":"https://github.com/ropnop/kerbrute/issues/5","id":424640322,"node_id":"MDU6SXNzdWU0MjQ2NDAzMjI=","number":5,"title":"panic: runtime error: invalid memory address or nil pointer dereference","user":{"login":"ThePirateWhoSmellsOfSunflowers","id":18633286,"node_id":"MDQ6VXNlcjE4NjMzMjg2","avatar_url":"https://avatars3.githubusercontent.com/u/18633286?v=4","gravatar_id":"","url":"https://api.github.com/users/ThePirateWhoSmellsOfSunflowers","html_url":"https://github.com/ThePirateWhoSmellsOfSunflowers","followers_url":"https://api.github.com/users/ThePirateWhoSmellsOfSunflowers/followers","following_url":"https://api.github.com/users/ThePirateWhoSmellsOfSunflowers/following{/other_user}","gists_url":"https://api.github.com/users/ThePirateWhoSmellsOfSunflowers/gists{/gist_id}","starred_url":"https://api.github.com/users/ThePirateWhoSmellsOfSunflowers/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ThePirateWhoSmellsOfSunflowers/subscriptions","organizations_url":"https://api.github.com/users/ThePirateWhoSmellsOfSunflowers/orgs","repos_url":"https://api.github.com/users/ThePirateWhoSmellsOfSunflowers/repos","events_url":"https://api.github.com/users/ThePirateWhoSmellsOfSunflowers/events{/privacy}","received_events_url":"https://api.github.com/users/ThePirateWhoSmellsOfSunflowers/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2019-03-24T17:47:09Z","updated_at":"2019-03-29T00:05:48Z","closed_at":null,"author_association":"NONE","body":"Hello,\r\nWhen I use the module `userenum`, an error is raised when it tries a login with the flag `Do not require Kerberos preauthentication` set. \r\n\r\nExample with only one account with the flag within the list\r\n```\r\n# ./kerbrute_linux_amd64 userenum --dc 172.16.0.1 -d xxxx.org user \r\n\r\n    __             __               __     \r\n   / /_____  _____/ /_  _______  __/ /____ \r\n  / //_/ _ \\/ ___/ __ \\/ ___/ / / / __/ _ \\\r\n / ,< /  __/ /  / /_/ / /  / /_/ / /_/  __/\r\n/_/|_|\\___/_/  /_.___/_/   \\__,_/\\__/\\___/                                        \r\n\r\nVersion: v1.0.0 (191510e) - 03/24/19 - Ronnie Flathers @ropnop\r\n\r\n2019/03/24 18:32:04 >  Using KDC(s):\r\n2019/03/24 18:32:04 >  \t172.16.0.1:88\r\n\r\npanic: runtime error: invalid memory address or nil pointer dereference\r\n[signal SIGSEGV: segmentation violation code=0x1 addr=0x18 pc=0x6849d9]\r\n\r\ngoroutine 15 [running]:\r\ngithub.com/ropnop/kerbrute/session.KerbruteSession.HandleKerbError(0x7ffc3a555751, 0xa, 0xc000016580, 0xa, 0xc00017e540, 0xc00001c180, 0x70, 0xc0000e0000, 0x0, 0x0, ...)\r\n\t/go/src/github.com/ropnop/kerbrute/session/session.go:110 +0x29\r\ngithub.com/ropnop/kerbrute/cmd.testUsername(0x780160, 0xc000052200, 0xc000016d98, 0x3)\r\n\t/go/src/github.com/ropnop/kerbrute/cmd/worker.go:84 +0x2ca\r\ngithub.com/ropnop/kerbrute/cmd.makeEnumWorker(0x780160, 0xc000052200, 0xc000200060, 0xc000016d80)\r\n\t/go/src/github.com/ropnop/kerbrute/cmd/worker.go:50 +0x14a\r\ncreated by github.com/ropnop/kerbrute/cmd.userEnum\r\n\t/go/src/github.com/ropnop/kerbrute/cmd/userenum.go:46 +0x17c\r\n\r\n```\r\nExample with a mixed list (here two accounts)\r\n```\r\n# ./kerbrute_linux_amd64 userenum --dc 172.16.0.1 -d xxxxx.org user \r\n\r\n    __             __               __     \r\n   / /_____  _____/ /_  _______  __/ /____ \r\n  / //_/ _ \\/ ___/ __ \\/ ___/ / / / __/ _ \\\r\n / ,< /  __/ /  / /_/ / /  / /_/ / /_/  __/\r\n/_/|_|\\___/_/  /_.___/_/   \\__,_/\\__/\\___/                                        \r\n\r\nVersion: v1.0.0 (191510e) - 03/24/19 - Ronnie Flathers @ropnop\r\n\r\n2019/03/24 17:47:58 >  Using KDC(s):\r\n2019/03/24 17:47:58 >  \t172.16.0.1:88\r\n\r\n2019/03/24 17:47:58 >  [+] VALID USERNAME:\t ashley@xxx.org\r\npanic: runtime error: invalid memory address or nil pointer dereference\r\n[signal SIGSEGV: segmentation violation code=0x1 addr=0x18 pc=0x6849d9]\r\n\r\ngoroutine 9 [running]:\r\ngithub.com/ropnop/kerbrute/session.KerbruteSession.HandleKerbError(0x7ffeea75e751, 0xa, 0xc000016580, 0xa, 0xc00017e540, 0xc00001c180, 0x70, 0xc0000e0000, 0x0, 0x0, ...)\r\n\t/go/src/github.com/ropnop/kerbrute/session/session.go:110 +0x29\r\ngithub.com/ropnop/kerbrute/cmd.testUsername(0x780160, 0xc000052200, 0xc000016db0, 0x3)\r\n\t/go/src/github.com/ropnop/kerbrute/cmd/worker.go:84 +0x2ca\r\ngithub.com/ropnop/kerbrute/cmd.makeEnumWorker(0x780160, 0xc000052200, 0xc000200060, 0xc000016d80)\r\n\t/go/src/github.com/ropnop/kerbrute/cmd/worker.go:50 +0x14a\r\ncreated by github.com/ropnop/kerbrute/cmd.userEnum\r\n\t/go/src/github.com/ropnop/kerbrute/cmd/userenum.go:46 +0x17c\r\n```\r\n\r\nAs you can see, the module works perfectly against \"normal\" accounts but not with a `Do not require Kerberos preauthentication` one.\r\n\r\nTested with the release version of Kerbrute against Windows Server 2012R2\r\n\r\n:sunflower: "},"comment":{"url":"https://api.github.com/repos/ropnop/kerbrute/issues/comments/477815222","html_url":"https://github.com/ropnop/kerbrute/issues/5#issuecomment-477815222","issue_url":"https://api.github.com/repos/ropnop/kerbrute/issues/5","id":477815222,"node_id":"MDEyOklzc3VlQ29tbWVudDQ3NzgxNTIyMg==","user":{"login":"ropnop","id":2555506,"node_id":"MDQ6VXNlcjI1NTU1MDY=","avatar_url":"https://avatars2.githubusercontent.com/u/2555506?v=4","gravatar_id":"","url":"https://api.github.com/users/ropnop","html_url":"https://github.com/ropnop","followers_url":"https://api.github.com/users/ropnop/followers","following_url":"https://api.github.com/users/ropnop/following{/other_user}","gists_url":"https://api.github.com/users/ropnop/gists{/gist_id}","starred_url":"https://api.github.com/users/ropnop/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ropnop/subscriptions","organizations_url":"https://api.github.com/users/ropnop/orgs","repos_url":"https://api.github.com/users/ropnop/repos","events_url":"https://api.github.com/users/ropnop/events{/privacy}","received_events_url":"https://api.github.com/users/ropnop/received_events","type":"User","site_admin":false},"created_at":"2019-03-29T00:05:48Z","updated_at":"2019-03-29T00:05:48Z","author_association":"OWNER","body":"Ha nice! Okay can you try building the binary from this branch and re-test with your users? https://github.com/ropnop/kerbrute/tree/fix/no_preauth\r\n\r\nTested on my end. Basically it was unsafe to assume I would always get an error after the ASREQ so if there's no error, I test if I got a valid ASREP and if so, the username therefore exists\r\n\r\nLet me know if it's working for you and I'll merge the PR\r\n\r\n"}}
{"actor":{"display_login":"ropnop"}}