search

byt3bl33d3r / DeathStar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.
GNU General Public License v3.0
1.57k stars 331 forks source link

get_gpo_computer was removed from Empire #54

Closed DanMcInerney closed 3 years ago

DanMcInerney commented 6 years ago

I know you're already aware of this. Figured I'd document it cuz we might be able to fix it soon. I'll see about implementing that one liner from harmj0y on the Empire issue tomorrow.

DanMcInerney commented 6 years ago

for documentation: 

Get-DomainOU -GPLink [GUID] | % { Get-DomainComputer -SearchBase $_.distinguishedname }
byt3bl33d3r commented 6 years ago

Submitted https://github.com/EmpireProject/Empire/pull/995. Basically a re-implementation of the old module using that one liner.

Hopefully it will be merged soon cause this broke the GPP password privesc.

rfrogman commented 5 years ago

Any workarounds for this? I do not see were Empire has addresses the issue yet.

byt3bl33d3r commented 5 years ago

@rfrogman Development on this project is at a stand still because of all the breaking changes Empire has made to it's API and modules over the past year and I don't have time to keep fixing them.

The goal is going to be to re-write this to use SILENTTRINITY, that way I have control over both projects, however that will take time as to do that I'm going to need to write a Rest-API and all of the necessary modules.

d0nu75 commented 5 years ago

Hey @byt3bl33d3r, any update on implementing this with SILENTTRINITY?