Unhandled Rubeus exception

[doubley612]

I'm executing:
Rubeus.exe kerberoast /rc4opsec

After a lot of tickets are retrieved I'm getting the following exception:

System.NullReferenceException: Object reference not set to an instance of an object. at Rubeus.Roast.Kerberoast(String spn, String userName, String OUName, String domain, String dc, NetworkCredential cred, String outFile, Boolean simpleOutput, KRB_CRED TGT, Boolean useTGTdeleg, String supportedEType, String pwdSetAfter, String pwdSetBefore, String ldapFilter, Int32 resultLimit, Boolean userStats) at Rubeus.Commands.Kerberoast.Execute(Dictionary2 arguments)
at Rubeus.Domain.CommandCollection.ExecuteCommand(String commandName, Dictionary2 arguments) at Rubeus.Program.MainExecute(String commandName, Dictionary2 parsedArgs)`

[HarmJ0y]

Can you retry this with the current branch? I'm hoping that f7c614e fixed it.

[wh1tenoise]

I just cloned the repository today and still get the exception.

Command
.\Rubeus.exe kerberoast /outfile:hashes.txt /format:hashcat /domain:[DOMAIN] /dc:[DC_HOST_NAME]

Exception

[!] Unhandled Rubeus exception:

System.NullReferenceException: Object reference not set to an instance of an object.
   at Rubeus.Roast.Kerberoast(String spn, List`1 spns, String userName, String OUName, String domain, String dc, NetworkCredential cred, String outFile, Boolean simpleOutput, KRB_CRED TGT, Boolean useTGTdeleg, String supportedEType, String pwdSetAfter, String pwdSetBefore, String ldapFilter, Int32 resultLimit, Boolean userStats, Boolean enterprise)
   at Rubeus.Commands.Kerberoast.Execute(Dictionary`2 arguments)
   at Rubeus.Domain.CommandCollection.ExecuteCommand(String commandName, Dictionary`2 arguments)
   at Rubeus.Program.MainExecute(String commandName, Dictionary`2 parsedArgs)

Occurs somewhere after

Rubeus/Rubeus/lib/Roast.cs

Line 390 in 0754532

[FuzzySecurity]

@HarmJ0y I think this is replicating
#49

In Roast.Kerberoast, here:
https://github.com/GhostPack/Rubeus/blob/master/Rubeus/lib/Roast.cs#L609

I had a similar issue and patching in the extended error handling from PR 49 worked. See pre/post patch execution on my local non-joined machine.

[FreeDurok]

mee too, have same exception: