"Starting Point" Tutorial Issue

HTB Content Machines
1

Hi Guys, following the exact steps in the starting point tutorial and running into an issue running the mssqlclient.py script. When I try the command “./mssqlclient.py ARCHETYPE/sql_svc@10.10.10.27 -windows-auth” it prompts for the password, in which I enter the previous steps discovered credentials. I get the below output. Any idea where the error lies?

Password:
[*] Encryption required, switching to TLS
[-] [(‘SSL routines’, ‘SSL_CTX_set_cipher_list’, ‘no cipher match’)]

2

Depending on the version of Impacket you have, you may need to edit tds.py to make the changes shown here: Adding AES as a possible cipher for TLS session. · fortra/impacket@754ee11 · GitHub

3

Though i have the same version of impacket’s shown in the tutorial and still i am having an issue. it is as bellow. Any idea with the issue??

root@kali:~/impacket/examples# python mssqlclient.py ARCHETYPE\sql_svc@10.10.10.27 -windows-auth
Impacket v0.9.19 - Copyright 2019 SecureAuth Corporation

Password:
[*] Encryption required, switching to TLS
[-] ERROR(ARCHETYPE): Line 1: Login failed for user ‘ARCHETYPE\Guest’.

4

You should use a forward slash /, not a backslash \ to separate domain and user name :wink:
... ARCHETYPE/sql_svc ...

5

Thank you. But it worked after updating python3

6

Hello world

I’m blocked on the last action, the upload does’nt work probelly :frowning:

How can i solve this ?

====================================================

kali@kali:~/impacket/examples$ ./psexec.py administrator@10.10.10.27
Impacket v0.9.22.dev1+20200513.101403.9a4b3f52 - Copyright 2020 SecureAuth Corporation

Password:
Requesting shares on 10.10.10.27…
Found writable share ADMIN$
[*] Uploading file UgmBhFGY.exe
[-] Error uploading file UgmBhFGY.exe, aborting…
[-] Error performing the installation, cleaning up: [Errno 32] Broken pipe

=======================================================

Best regards

7

Type your comment> @HomeSen said:

You should use a forward slash /, not a backslash \ to separate domain and user name :wink:
... ARCHETYPE/sql_svc ...

this did not work

8

I get the following error

Password:
[*] Encryption required, switching to TLS
[-] ERROR(ARCHETYPE): Line 1: Login failed for user ‘ARCHETYPE\Guest’

9

@parry9 said:
Depending on the version of Impacket you have, you may need to edit tds.py to make the changes shown here: Adding AES as a possible cipher for TLS session. · fortra/impacket@754ee11 · GitHub

Checked my tds.py and it looks correct.

10

I got it to work by adding -p 1433 parameter in mssqlclient.py, so it goes like this:
“python3 mssqlclient.py -p 1433 ARCHETYPE/sql_svc@10.10.10.27 -windows-auth”

11

Had this identical issue using the pwk version of kali - none of the above suggestions appeared to work so grabbed the latest Impacket v0.9.22.dev

git clone GitHub - fortra/impacket: Impacket is a collection of Python classes for working with network protocols.

cd impacket

pip install .

12

Type your comment> @protopet said:

I got it to work by adding -p 1433 parameter in mssqlclient.py, so it goes like this:
“python3 mssqlclient.py -p 1433 ARCHETYPE/sql_svc@10.10.10.27 -windows-auth”

it worked !

13

./mssqlclient.py ARCHETYPE\sql_svc@10.10.10.27 -windows-auth
Impacket v0.9.15 - Copyright 2002-2016 Core Security Technologies

Password:
[*] Encryption required, switching to TLS
[-] [(‘SSL routines’, ‘SSL_CTX_set_cipher_list’, ‘no cipher match’)]

error please hlep slove this

14

HOW CAN START?