-
Notifications
You must be signed in to change notification settings - Fork 285
Running Snaffler with runas /netonly through Proxy / Proxifier #177
Open
Description
I tried to run Snaffler through a proxy, but it seems like Snaffler does nothing and then quits.
I configured Proxifier so that all connections go through my proxy for 192.168.56.0/24 (GOAD Lab) for all applications. Then I opened a /netonly command prompt via
runas /netonly /user:north.sevenkingdoms.local\samwell.tarlyand just tried to run Snaffler via
Snaffler.exe -s -o snaffler.goad.dc02.log -m snaffler.goad.dc02.log -d north.sevenkingdoms.local -c 192.168.56.11
Here is the full output:
C:\Tools\Snaffler>Snaffler.exe -s -o snaffler.goad.dc02.log -m snaffler.goad.dc02.log -d north.sevenkingdoms.local -c 192.168.56.11 .::::::.:::. :::. :::. .-:::::'.-:::::'::: .,:::::: :::::::.. ;;;` ``;;;;, `;;; ;;`;; ;;;'''' ;;;'''' ;;; ;;;;'''' ;;;;``;;;; '[==/[[[[, [[[[[. '[[ ,[[ '[[, [[[,,== [[[,,== [[[ [[cccc [[[,/[[[' ''' $ $$$ 'Y$c$$c$$$cc$$$c`$$$'`` `$$$'`` $$' $$"" $$$$$$c 88b dP 888 Y88 888 888,888 888 o88oo,.__888oo,__ 888b '88bo, 'YMmMY' MMM YM YMM ''` 'MM, 'MM, ''''YUMMM''''YUMMMMMMM 'W' by l0ss and Sh3r4 - github.com/SnaffCon/Snaffler [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:14:56Z [Info] Parsing args... [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:14:57Z [Info] Parsed args successfully. [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:14:57Z [Info] Invoking DFS Discovery because no ComputerTargets or PathTargets were specified [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:14:57Z [Info] Getting DFS paths from AD. [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:14:57Z [Info] Found 0 DFS Shares in 0 namespaces. [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:14:57Z [Info] Invoking full domain computer discovery. [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:14:57Z [Info] Getting computers from AD. [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:14:57Z [Info] Got 2 computers from AD. [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:14:57Z [Info] Starting to look for readable shares... [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:14:57Z [Info] Created all sharefinder tasks. [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:19:57Z [Info] Status Update: ShareFinder Tasks Completed: 0 ShareFinder Tasks Remaining: 0 ShareFinder Tasks Running: 0 TreeWalker Tasks Completed: 0 TreeWalker Tasks Remaining: 0 TreeWalker Tasks Running: 0 FileScanner Tasks Completed: 0 FileScanner Tasks Remaining: 0 FileScanner Tasks Running: 0 75,7MB RAM in use. ShareScanner queue finished, rebalancing workload. Insufficient FileScanner queue size, rebalancing workload. Max ShareFinder Threads: 0 Max TreeWalker Threads: 21 Max FileScanner Threads: 39 Been Snafflin' for 00:05:00.0267202 and we ain't done yet... [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:19:57Z [Info] Status Update: ShareFinder Tasks Completed: 0 ShareFinder Tasks Remaining: 0 ShareFinder Tasks Running: 0 TreeWalker Tasks Completed: 0 TreeWalker Tasks Remaining: 0 TreeWalker Tasks Running: 0 FileScanner Tasks Completed: 0 FileScanner Tasks Remaining: 0 FileScanner Tasks Running: 0 75,8MB RAM in use. Insufficient FileScanner queue size, rebalancing workload. Max ShareFinder Threads: 0 Max TreeWalker Threads: 22 Max FileScanner Threads: 38 Been Snafflin' for 00:05:00.0267202 and we ain't done yet... [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:19:57Z [Info] Finished at 13/07/2025 03:19:57 [DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025年07月13日 10:19:57Z [Info] Snafflin' took 00:05:00.0267202 Snaffler out. I snaffled 'til the snafflin was done.
The initial LDAP connection to the DC works, since it finds the two AD computer objects (Got 2 computers from AD.). But after that it just seems to hang and do nothing.
I also added the following relevant hosts to my hosts file:
192.168.56.11 winterfell
192.168.56.11 north.sevenkingdoms.local
192.168.56.11 winterfell.north.sevenkingdoms.local
192.168.56.22 castelblack.north.sevenkingdoms.local
192.168.56.22 castelblack
Activity
Metadata
Metadata
Assignees
Labels
No labels