Skip to content
This repository has been archived by the owner on Sep 2, 2022. It is now read-only.

DomainController option does not seem to work. Need to request specific DC ip. #82

Open
phackt opened this issue Aug 6, 2019 · 0 comments

Comments

@phackt
Copy link

phackt commented Aug 6, 2019

Hello guys,

While i was trying to explicitly specify the ip of the domain controller with the following command (SharpHound.ps1), i was thinking that the root dse will be directly requested to the ldap service on this DC ip:

Invoke-BloodHound -DomainController 10.10.10.10
Initializing BloodHound at 23:58 on 01/08/2019
Unable to contact domain. Try from a domain context!

Unfortunately, i captured the traffic and i still found the type SRV DNS requests used to discover the DC (_ldap._tcp.dc._msdcs). The fact is that my ip is never contacted. For example during an engagement how are you doing if you are doing a port redirection on a pivot machine ?

On wireshark no ip dest 10.10.10.10 appears (10.10.10.10 is up, etc ...).

I'm working on a Microsoft Windows 10 Pro machine with the master branch of BloodHound.

Thanks in advance,

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant