Valid RDP credentials are not identified
Author: Green360Created May 22, 2023Updated Nov 18, 2023
I have installed the current version of crackmapexec (Version : 5.4.1, Codename: Indestructible G0thm0g) on Parrot OS via pipx.
There is a server that I can successfully connect to via proxychains and xfreerdp on port 3389:
$ proxychains xfreerdp /v:172.16.100.100 /u:user /p:'password' /cert:ignore /tls-ciphers:DEFAULT@SECLEVEL=0However if I run crackmapexec, it just finishes without any output. I have only seen this behaviour when the host was not reachable but this should not be the case here as I can connect via xfreerdp.
$ proxychains crackmapexec rdp 172.16.100.100 -u user -p 'password'
ProxyChains-3.1 (http://proxychains.sf.net)Am I missing something?
If I run the command with "--verbose" the output gives me this:
...
'username': ['user'],
'verbose': True}
DEBUG:asyncio:Using selector: EpollSelector
DEBUG Using selector: EpollSelector
DEBUG:root:Running
DEBUG Running
DEBUG:root:Started thread poller
DEBUG Started thread poller
DEBUG:root:Stopped thread poller
DEBUG Stopped thread pollerThe same server also has port 445 open and if I try the SMB option of crackmapexec I get the feedback that the credentials are not correct which is the expected output for SMB:
$proxychains crackmapexec smb 172.16.100.100 -u user -p 'password' -d test.local
ProxyChains-3.1 (http://proxychains.sf.net)
SMB 172.16.100.100 445 DEV04 [*] Windows 10.0 Build 20348 x64 (name:DEV04) (domain:test.local) (signing:False) (SMBv1:False)
SMB 172.16.100.100 445 DEV04 [-] test.local\\\user:password STATUS_LOGON_FAILURE Source: byt3bl33d3r/CrackMapExec