search

trustedsec / CS-Situational-Awareness-BOF

Situational Awareness commands implemented using Beacon Object Files
GNU General Public License v2.0
1.28k stars 221 forks source link

ADCS Enumeration #47

Closed kapn-kaos closed 3 years ago

kapn-kaos commented 3 years ago

Added

adcs_enum

This command enumerates the certificate authorities and certificate types (templates) in the Acitive Directory Certificate Services using undocumented Win32 functions. It displays basic information as well as the CA cert, flags, permissions, and similar information for the templates.

adcs_com

This command enumerates the certificate authorities and certificate types (templates) in the Acitive Directory Certificate Services using the ICertConfig, ICertRequest, and IX509CertificateTemplate COM objects. It displays basic information as well as the CA cert, flags, permissions, and similar information for the templates.

adcs_com2

This command enumerates the certificate authorities and certificate types (templates) in the Acitive Directory Certificate Services using the IX509PolicyServerListManager, IX509PolicyServerUrl, IX509EnrollmentPolicyServer, ICertificationAuthority, and IX509CertificateTemplate COM objects. It displays basic information as well as the CA cert, flags, permissions, and similar information for the templates.

DynamicLoad

This function in base.c will dynamically load a library and resolve a function at runtime. This was needed to get around the BOF loader's win32 api limitation.

Modifications

bofdefs.h

Added a few new APIs to the bofdef file.