Metasploit mailing list archives

Re: problems with psexec


From: Robin Wood <robin () digininja org>
Date: Mon, 10 Jan 2011 00:37:48 +0000

On 9 January 2011 20:31, Carlos Perez <carlos_perez () darkoperator com> wrote:
Check if signing is enabled and if using only NTLM2

Thought I'd enabled Lanman but just done a password dump and not got a
LM password stored so obviously not. Tried loads of things to disable
it but now given up and accessing it through Meterpreter in an exe,
that works.

Robin

Sent from my iPhone

On Jan 9, 2011, at 3:46 PM, Robin Wood <robin () digininja org> wrote:

I'm having problems getting psexec working against Vista in my lab.
The machine is on a domain but has a local user of robin. I can access
the share fine through OS X Finder so I know the user/password is OK
and the share is working OK. The machine in a VirtualBox internal
network with port 445 NAT'ed to the outside world through a machine
bridging the two networks.

When I specified the username in Finder I had to give it the machine
name, vista-domain\robin but regardless of whether I try robin or
vista-domain\robin in psexec I get STATUS_ACCESS_DENIED. Similarly if
I try against a user on the domain I get the same error. If I try an
incorrect username I get STATUS_LOGON_FAILURE

One other thing I've tried is setting smbdomain to empty, the machine
name and, when I was trying the domain account the domain. This
doesn't seem to affect it.

I use psexec on site regularly without any problems but for some
reason against this Vista box it isn't working. Is there something
special with psexec and Vista?

Robin
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


Current thread: