byt3bl33d3r / CrackMapExec

A swiss army knife for pentesting networks
BSD 2-Clause "Simplified" License
8.29k stars 1.64k forks source link

[Feature request] Enumerate groups of a specific user. #793

Open corsch opened 1 year ago

corsch commented 1 year ago

At the moment it is possible to enumerate all users / groups or a specific user / group with CME. --users [USER] enumerate domain users, if a user is specified than only its information is queried. --groups [GROUP] enumerate domain groups, if a group is specified than its members are enumerated

Unfortunately the information of the user does not contain the groups of the user. It would be fantastic to enumerate the groups of a specific user too.

Cyb3rC3lt commented 10 months ago

Try this:

cme ldap 10.110.228.50 -u test -p 'pass' -d test.info -M groupmembership -o USER=testuser

corsch commented 10 months ago

Thank you I will give it a try