BloodHoundAD / BloodHound

Six Degrees of Domain Admin
GNU General Public License v3.0
9.8k stars 1.73k forks source link

Added import of "Group Types" and "Membership Rule" for AZGroups #647

Closed ahazu closed 1 year ago

ahazu commented 1 year ago

These are useful when looking for privilege escalation vectors (see https://www.mnemonic.io/resources/blog/abusing-dynamic-groups-in-azure-ad-for-privilege-escalation/).

Listing all dynamic groups can be done with MATCH (g:AZGroup) WHERE any(gt IN g.groupTypes WHERE gt = "DynamicMembership") RETURN g

github-actions[bot] commented 1 year ago

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

ahazu commented 1 year ago

I have read the CLA Document and I hereby sign the CLA

ahazu commented 1 year ago

recheck

JonasBK commented 1 year ago

Nice one. Thanks for your contribution @ahazu!