-
-
Notifications
You must be signed in to change notification settings - Fork 118
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
fce8cbf
commit de78334
Showing
4 changed files
with
3,132 additions
and
188 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,24 @@ | ||
-=v0.7=- | ||
- Initial release. | ||
|
||
-=v0.8=- | ||
- Expanded delegation information pulled back. | ||
- GUID based rights assignment. | ||
- Added detection information. | ||
|
||
-=v1.2=- | ||
- A number of old and new functions now support new parameters "--limit" and "--filter". | ||
- Added generic LDAP search capabilities. | ||
- Added function which takes a user or SID and converts it to a user and SID. | ||
- Modified the "--group" function. It will now either enumerate group members as before or if provided with a user, list user group memberships. | ||
- Added function to remove a user from a group. | ||
- Added function which finds all GPO objects, optionally displays their ACL. | ||
- Added function to abuse GPO permissions and add a user to the local BUILTIN\Administrators group. | ||
- Added function to abuse GPO permissions and add a token permission to a user (e.g. SeLoadDriverPrivilege). | ||
- Added function to abuse GPO permissions and add a User or Computer immediate task with or without special filtering. | ||
- Added function which can increase the User or Computer version of GPO AD objects. | ||
- Added function which lists out some default domain policy settings (e.g. MaximumPasswordAge). | ||
- Added function which can do DNS enumeration based on AD records (ADIDNS). | ||
- Added function which can identify accounts that have PASSWD_NOTREQD as part of their userAccountControl flags. | ||
- Added function which can set an SPN on an account or remove it. | ||
- Bugfix in "--spn" where it would only show the first SPN. |
Oops, something went wrong.