safebuffer/vulnerable-AD

Passwords for Kerberoasting conflicts with AD password settings

DotDotSlashRepo opened this issue · 2 comments

DotDotSlashRepo commented

It looks like script is not configuring password policy for the domain.

I got below error on "VulnAD-Kerberoasting" function. I am using "Windows Server 2016 Standard Evaluation"

[+] Kerberoasting Done
Set-AdAccountPassword : The password does not meet the length, complexity, or history requirement of the domain.
At line:5 char:9
+         Set-AdAccountPassword -Identity $randomuser -Reset -NewPasswo ...
+         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo          : InvalidData: (annadiane.genni:ADAccount) [Set-ADAccountPassword], ADPasswordComplexityException
+ FullyQualifiedErrorId : ActiveDirectoryServer:1325,Microsoft.ActiveDirectory.Management.Commands.SetADAccountPassword
safebuffer commented

i believe is cuz of password length, however, it should be fixed now

DotDotSlashRepo commented

Awesome. Works like a charm :)

  • ❤️1