search

NetSPI / PowerHuntShares

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.
Other
546 stars 77 forks source link

Enhancement: Compare / Evaluate NTFS Permissions #7

Open MarkSe99 opened 1 year ago

MarkSe99 commented 1 year ago

At the moment, we are seeing many FP, where a share can have Everyone Access, but the underlying NTFS permissions prevent access. Is it possible to update the script / logic to take this into account.

nullbind commented 1 year ago

That is a solid ask. I'll see if i can find some time to add that layer. Sorry it didnt make it into the initial release.

In the meantime, one thing I recommend is running it as a standard domain user vs a domain admin. I realize that shouldnt make a different, but it does at the moment. Thank you for taking the time to make the request and share your thoughts.