Default to NTLM auth, since plaintext will almost certainly never work

rapid7 · Nov 27, 2023 · 7ab4876 · 7ab4876
1 parent 622277e
commit 7ab4876
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/modules/auxiliary/gather/asrep.rb b/modules/auxiliary/gather/asrep.rb
@@ -47,6 +47,11 @@ def initialize(info = {})
         OptString.new('RHostname', [ true, "The domain controller's hostname"], aliases: ['LDAP::Rhostname']),
       ]
     )
+    register_advanced_options(
+      [
+        OptEnum.new('LDAP::Auth', [true, 'The Authentication mechanism to use', Msf::Exploit::Remote::AuthOption::NTLM, Msf::Exploit::Remote::AuthOption::LDAP_OPTIONS]),
+      ]
+    )
 
     default_config_file_path = File.join(::Msf::Config.data_directory, 'auxiliary', 'gather', 'ldap_query', 'ldap_queries_default.yaml')
     loaded_queries = safe_load_queries(default_config_file_path) || []