TypeError: a bytes-like object is required, not 'str' about ldapdomaindump

[dirkjanm]

Is this on HTB? Which host (then I can try to reproduce this myself)? Also are you using python2 or 3? Do you get the same error when you update ldap3?

[grease082]

thanks for the fast response!

yes this is on htb. It is the forest machine.

I’m using python3!

With python2 I get the following error:
root@kali:~/Downloads/ldapdomaindump# python2 ldapdomaindump.py 10.10.10.161
[] Connecting as anonymous user, dumping will probably fail. Consider specifying a username/password to login with
[] Connecting to host...
[] Binding to host
[+] Bind OK
[] Starting domain dump
Traceback (most recent call last):
File "ldapdomaindump.py", line 3, in
ldapdomaindump.main()
File "/root/Downloads/ldapdomaindump/ldapdomaindump/init.py", line 944, in main
dd.domainDump()
File "/root/Downloads/ldapdomaindump/ldapdomaindump/init.py", line 422, in domainDump
rw.generateUsersReport(self)
File "/root/Downloads/ldapdomaindump/ldapdomaindump/init.py", line 789, in generateUsersReport
dd.mapGroupsIdsToDns()
File "/root/Downloads/ldapdomaindump/ldapdomaindump/init.py", line 350, in mapGroupsIdsToDns
gid = int(group.objectSid.value.split('-')[-1])
UnicodeDecodeError: 'ascii' codec can't decode byte 0xb7 in position 15: ordinal not in range(128)

Yes I get the same error after the update of ldap3!

[dirkjanm]

This is probably a HTB specific thing. ldapdomaindump relies on the schema definitions to parse objects into a readable type. However I think the schema was (intentionally?) modified on this box, which makes the queries that try to load the schema fail. Therefor it doesn't decode the binary SID into a readable SID and thus it throws all kinds of errors. I could fix this specific instance but without the schema there will be many parts of the code that fail.

[grease082]

Okay, thank you very much for the fast clarification. I'll query the domain in a different way then.

[dirkjanm]

Closing this since dumping everything without access to the schema is not something that will be supported.