Running Snaffler with runas /netonly through Proxy / Proxifier #177
Description
I tried to run Snaffler through a proxy, but it seems like Snaffler does nothing and then quits.
I configured Proxifier so that all connections go through my proxy for 192.168.56.0/24 (GOAD Lab) for all applications. Then I opened a /netonly command prompt via
runas /netonly /user:north.sevenkingdoms.local\samwell.tarlyand just tried to run Snaffler via
Snaffler.exe -s -o snaffler.goad.dc02.log -m snaffler.goad.dc02.log -d north.sevenkingdoms.local -c 192.168.56.11Here is the full output:
C:\Tools\Snaffler>Snaffler.exe -s -o snaffler.goad.dc02.log -m snaffler.goad.dc02.log -d north.sevenkingdoms.local -c 192.168.56.11
.::::::.:::. :::. :::. .-:::::'.-:::::'::: .,:::::: :::::::..
;;;` ``;;;;, `;;; ;;`;; ;;;'''' ;;;'''' ;;; ;;;;'''' ;;;;``;;;;
'[==/[[[[, [[[[[. '[[ ,[[ '[[, [[[,,== [[[,,== [[[ [[cccc [[[,/[[['
''' $ $$$ 'Y$c$$c$$$cc$$$c`$$$'`` `$$$'`` $$' $$"" $$$$$$c
88b dP 888 Y88 888 888,888 888 o88oo,.__888oo,__ 888b '88bo,
'YMmMY' MMM YM YMM ''` 'MM, 'MM, ''''YUMMM''''YUMMMMMMM 'W'
by l0ss and Sh3r4 - github.com/SnaffCon/Snaffler
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:14:56Z [Info] Parsing args...
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:14:57Z [Info] Parsed args successfully.
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:14:57Z [Info] Invoking DFS Discovery because no ComputerTargets or PathTargets were specified
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:14:57Z [Info] Getting DFS paths from AD.
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:14:57Z [Info] Found 0 DFS Shares in 0 namespaces.
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:14:57Z [Info] Invoking full domain computer discovery.
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:14:57Z [Info] Getting computers from AD.
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:14:57Z [Info] Got 2 computers from AD.
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:14:57Z [Info] Starting to look for readable shares...
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:14:57Z [Info] Created all sharefinder tasks.
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:19:57Z [Info] Status Update:
ShareFinder Tasks Completed: 0
ShareFinder Tasks Remaining: 0
ShareFinder Tasks Running: 0
TreeWalker Tasks Completed: 0
TreeWalker Tasks Remaining: 0
TreeWalker Tasks Running: 0
FileScanner Tasks Completed: 0
FileScanner Tasks Remaining: 0
FileScanner Tasks Running: 0
75,7MB RAM in use.
ShareScanner queue finished, rebalancing workload.
Insufficient FileScanner queue size, rebalancing workload.
Max ShareFinder Threads: 0
Max TreeWalker Threads: 21
Max FileScanner Threads: 39
Been Snafflin' for 00:05:00.0267202 and we ain't done yet...
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:19:57Z [Info] Status Update:
ShareFinder Tasks Completed: 0
ShareFinder Tasks Remaining: 0
ShareFinder Tasks Running: 0
TreeWalker Tasks Completed: 0
TreeWalker Tasks Remaining: 0
TreeWalker Tasks Running: 0
FileScanner Tasks Completed: 0
FileScanner Tasks Remaining: 0
FileScanner Tasks Running: 0
75,8MB RAM in use.
Insufficient FileScanner queue size, rebalancing workload.
Max ShareFinder Threads: 0
Max TreeWalker Threads: 22
Max FileScanner Threads: 38
Been Snafflin' for 00:05:00.0267202 and we ain't done yet...
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:19:57Z [Info] Finished at 13/07/2025 03:19:57
[DESKTOP-A3TDK6P\admin@DESKTOP-A3TDK6P] 2025-07-13 10:19:57Z [Info] Snafflin' took 00:05:00.0267202
Snaffler out.
I snaffled 'til the snafflin was done.The initial LDAP connection to the DC works, since it finds the two AD computer objects (Got 2 computers from AD.). But after that it just seems to hang and do nothing.
I also added the following relevant hosts to my hosts file:
192.168.56.11 winterfell
192.168.56.11 north.sevenkingdoms.local
192.168.56.11 winterfell.north.sevenkingdoms.local
192.168.56.22 castelblack.north.sevenkingdoms.local
192.168.56.22 castelblack