fortra / impacket

Impacket is a collection of Python classes for working with network protocols.
https://www.coresecurity.com
Other
12.99k stars 3.5k forks source link

Active Directory Lightweight Directory Services #1678

Open Crypt0s opened 6 months ago

Crypt0s commented 6 months ago

This modification to secretsdump.py adds support for local filesystem parsing of adamntds.dit files from Microsoft Active Directory Application Mode (ADAM) and Lightweight Directory Services (LDS) products. ADAM/AD LDS implements a more standards-compliant LDAP service using a lot of code from Active Directory, including the Directory Information Tree (DIT) structure. It stores the information slightly differently however, and Secretsdump is therefore incompatible in its current configuration.

This fork adds changes to adjust the calculation of the ADAM/LDS version of the DIT file Bootkey and modifies secretsdump to not assume that AD-specific schema attributes will be present in each row record of the DIT file.

To support these changes, I introduce a new flag to Secretsdump.py which the user presents when parsing an AD LDS DIT file.

This PR was previously opened under PR-1481 which was lost in a repository ownership move.