trustedsec / CS-Situational-Awareness-BOF

Situational Awareness commands implemented using Beacon Object Files
GNU General Public License v2.0
1.26k stars 218 forks source link

Crash in NetGroupList #39

Closed freefirex closed 3 years ago

freefirex commented 3 years ago

NetGroupList does not properly handle domains with an very large number of groups. I'd guess more than 100 entries.

Specifically we never update our starting index as we continue to query

Example on MSDN shows what we are missing.

NetGroupListMember / Local variants should likely also be checked