CravateRouge / bloodyAD

BloodyAD is an Active Directory Privilege Escalation Framework
MIT License
1.12k stars 112 forks source link

Adding two functions to list group membership and list OU permissions for a given principals #35

Closed undr-0 closed 1 year ago

undr-0 commented 1 year ago

To list the membership of a principal: ./bloodyAD.py --host 10.10.10.10 -d testing.local -u bloody -p XXX get membership "CN=bloody,OU=Test,OU=Users,OU=random,DC=testing,DC=local" By default it list groups recursively, there is a flag --recurse that can be set to control that

To list the interesting OU a principal can mess with: ./bloodyAD.py --host 10.10.10.10 -d testing.local -u bloody -p XXX get writableOU "CN=bloody,OU=Test,OU=Users,OU=random,DC=testing,DC=local" There is a parameter to change the page_size of the ldap request made, default is 200 it may be too low for real env?

CravateRouge commented 1 year ago

Thanks, your PR rocks!!