KERBEROS ATTACKS - Unconstrained Delegation - Users

[Alt_F4]

Hello, I understand that you managed to reset the hashes. Here is my similar forum thread with all the steps. Can you please look with fresh eyes and tell me what I’m doing wrong?

Kerberos attacks

hi @tigerboy, if you connect without a ticket, you can connect using credentials using the following command: smbclient.py [email protected] But this will not give you anything, because we need to get the admin hash and we need to carry out an attack like in the section to reset the hashes. if we add options (-k -no-pass) to the command above then we will get an error “[-] [Errno Connection error (INLANEFREIGHT.LOCAL:88)] [Errno 111] Connection refused”