NetSPI/PowerHuntShares

error connecting to the domain controller

s23hck opened this issue · 2 comments

s23hck commented

Hi,
thanks for this script !
I have an error with all the command i have tested from a Windows 10 join domain computer / user:

Import-Module .\PowerHuntShare.psm1
Invoke-HuntSMBShares -Threads 100 -OutputDirectory 'C:\USers\me\Downloads\'

Response : There appears to have been an error connecting to the domain controller.

Invoke-HuntSMBShares -Threads 100 -OutputDirectory $ouptut -Credential domain\name

Response : There appears to have been an error connecting to the domain controller.

For this last command, i tried : domain\name, DOMAIN\name, DOMAIN.TLD\name

Do you have an advice for me ?

nullbind commented

Sorry for the delayed response. I'm not positive off the top of my head, but you could always try setting the DC explicitly.

Invoke-HuntSMBShares -Threads 100 -RunSpaceTimeOut 10 -OutputDirectory c:\folder\ -DomainController 10.1.1.1 -Credential domain\user

Hopefully that helps.

nullbind commented

As a side note, sometimes I've a had to change the following setting in Windows 10 to access netlogon/sysvol.

Instructions

  1. Open gpedit.msc
  2. go to Computer -> Administrative Templates -> Network -> Network Provider -> Hardened UNC Paths
  3. Enable the policy and click "Show" button.
  4. Enter "*" into "Value name"
  5. Enter the following text into the "Value" field:
    RequireMutualAuthentication=0,RequireIntegrity=0,RequirePrivacy=0