diff options
| author | Bryan McNulty <bryanmcnulty@protonmail.com> | 2025-04-26 15:20:00 -0500 |
|---|---|---|
| committer | Bryan McNulty <bryanmcnulty@protonmail.com> | 2025-04-26 15:20:00 -0500 |
| commit | aadf3819a559db8186ba92078dfc33d0f92e47ed (patch) | |
| tree | e9e80bc0daab7e636d3cb084ceb07c22cbc56467 | |
| parent | 904096e29c66f052e97fd96af00bed4d929fdad2 (diff) | |
| download | goexec-aadf3819a559db8186ba92078dfc33d0f92e47ed.tar.gz goexec-aadf3819a559db8186ba92078dfc33d0f92e47ed.zip | |
Fix parsing of string bindings returned in remote activation response
| -rw-r--r-- | pkg/goexec/wmi/module.go | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/pkg/goexec/wmi/module.go b/pkg/goexec/wmi/module.go index 1cad285..3ae98cc 100644 --- a/pkg/goexec/wmi/module.go +++ b/pkg/goexec/wmi/module.go @@ -76,8 +76,7 @@ func (m *Wmi) Init(ctx context.Context) (err error) { var newOpts []dcerpc.Option for _, bind := range actResponse.OXIDBindings.GetStringBindings() { - stringBinding, err := dcerpc.ParseStringBinding("ncacn_ip_tcp:" + bind.NetworkAddr) // TODO: try bind.String() - + stringBinding, err := dcerpc.ParseStringBinding(bind.String()) if err != nil { log.Debug().Err(err).Msg("Failed to parse string binding") continue @@ -106,13 +105,13 @@ func (m *Wmi) Init(ctx context.Context) (err error) { NetworkResource: m.Resource, }) - log.Info().Msg("Completed NTLMLogin operation") - if err != nil { log.Error().Err(err).Msg("Failed to login on remote instance") return fmt.Errorf("login: IWbemLevel1Login::NTLMLogin: %w", err) } + log.Info().Msg("Completed NTLMLogin operation") + ipid = login.Namespace.InterfacePointer().IPID() m.servicesClient, err = iwbemservices.NewServicesClient(ctx, m.Client.Dce(), dcom.WithIPID(ipid)) |