Merge pull request #126 from Kahvi-0/main

--kerberoast Improvement
Pennyw0rth · Apr 2, 2024 · da7c507 · da7c507
2 parents cd0d3c8 + 72eeb7e
commit da7c507
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/nxc/protocols/ldap.py b/nxc/protocols/ldap.py
@@ -942,7 +942,7 @@ def asreproast(self):
 
  def kerberoasting(self):
  # Building the search filter
- searchFilter = "(&(servicePrincipalName=*)(UserAccountControl:1.2.840.113556.1.4.803:=512)(!(UserAccountControl:1.2.840.113556.1.4.803:=2))(!(objectCategory=computer)))"
+ searchFilter = "(&(servicePrincipalName=*)(!(objectCategory=computer)))"
  attributes = [
  "servicePrincipalName",
  "sAMAccountName",
@@ -993,7 +993,7 @@ def kerberoasting(self):
 
  if mustCommit is True:
  if int(userAccountControl) & UF_ACCOUNTDISABLE:
- self.logger.debug(f"Bypassing disabled account {sAMAccountName} ")
+ self.logger.highlight(f"Bypassing disabled account {sAMAccountName} ")
  else:
  answers += [[spn, sAMAccountName, memberOf, pwdLastSet, lastLogon, delegation] for spn in SPNs]
  except Exception as e: