Agent: Report failed login attempts

This commit is contained in:
Kekoa Kaaikala 2022-10-07 20:14:04 +00:00
parent 74088c8143
commit 8eb3c94a94
1 changed files with 6 additions and 0 deletions

View File

@ -9,6 +9,7 @@ import os
import re
import tempfile
from binascii import unhexlify
from time import time
from typing import Dict, List, Optional, Sequence, Tuple
import impacket
@ -130,13 +131,18 @@ class ZerologonExploiter(HostExploiter):
# Try authenticating.
for _ in interruptible_iter(range(0, self.MAX_ATTEMPTS), self.interrupt):
timestamp = time()
try:
rpc_con_auth_result = self._try_zero_authenticate(rpc_con)
if rpc_con_auth_result is not None:
return True, rpc_con_auth_result
error_message = "Failed to authenticate with domain controller"
self._publish_exploitation_event(timestamp, False, error_message=error_message)
except Exception as err:
error_message = f"Error occured while authenticating to {self.host}: {err}"
logger.info(error_message)
self._publish_exploitation_event(timestamp, False, error_message=error_message)
return False, None
return False, None