Clarification on Unexpected Behavior #62
Description
Hello, thanks for the awesome tool!
I've been using it a lot lately on HTB Academy, but I am currently facing a weird issue that had me running in circles for days.
I have tried every possible variant of the attack in the screenshot: powershell cradles, running exe payload that is hosted locally, even simple stuff like cmd /c whoami > test.txt
Every single attempt finished successfully (no errors or anything), but that's it, nothing happens and I never get command execution no matter the type.
I am using an admin account, I can launch attacks with this account from Linux using sccmhunter, but all windows tools fail.
The only thing I am suspicious about is that running scripts from sccmhunter gives me the error Hierarchy settings do not allow author's to approve their own scripts. Try using alternate approval credentials.
When I provide alternate username and password via -au & -ap args (basically logging in using 2 SCCM admins), the attack works. Not sure if that's the reason SharpSCCM is failing?
any suggestions on where to start troubleshooting would be great!
