CroweCybersecurity / ad-ldap-enum

An LDAP based Active Directory user and group enumeration tool
MIT License
303 stars 67 forks source link

Adding Support for Computer SPNs #19

Closed sleventyeleven closed 3 years ago

sleventyeleven commented 5 years ago

Added an additional option -S, --spns to collect SPNs (in relation to #15 ) which if included also queries domain computers for 'servicePrincipalName'. The response is then parsed by a new function 'parse_spns' which attempts to group spns into categories based on commonly known/seen SPN strings. These categories are then written to the standard Domain Computers output file as additional columns, wherein the / is included as a comma separated list (or blank if no matches were found), in each given given hosts category cell.

raul5660 commented 3 years ago

combined with #23