Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
topotam authored Feb 15, 2024
1 parent 47d1daf commit 44d9fd8
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC

The tools use the LSARPC named pipe with inteface c681d488-d850-11d0-8c52-00c04fd90f7e because it's more prevalent. But it's possible to trigger with the EFSRPC named pipe and interface df1941c5-fe89-4e79-bf10-463657acf44d. It doesn't need credentials against Domain Controller :D

Disabling the EFS service seems not to mitigate the "feature".
Disabling the EFS service seems not to mitigate the "feature"VOUS ETES DES GROSSE MERDES

The Python one require Impacket to be installed, the Windows PoC was done on VS 2019 Community.
If compilation problem, remember to add Rpcrt4.lib in the linker. Compile in x86.
Expand Down

0 comments on commit 44d9fd8

Please sign in to comment.