Create get_gpos module, implement get-folder command, and add some module helper functions #320
Conversation
Marshall-Hallenbeck
added
enhancement
Marshall-Hallenbeck
requested review from
zblurx,
NeffIsBack and
mpgn
as code owners
Marshall-Hallenbeck
changed the title
|
Would it be possible to detect a folder on a remote system? Than we could just integrate it into the existing get commands |
Well the current get-file command references a file, so what would we change it to? I think having them separate makes more sense. |
Hmm yeah i was thinking about moving |
|
just using the verbs "get" and "put" doesn't make it clear what you are getting or putting, so it's sorta confusing, and honestly, changing all that code to just make it a single call sounds like a huge pain in the ass that I'm not interested in doing lol |
Signed-off-by: Marshall Hallenbeck <Marshall.Hallenbeck@gmail.com>
I mean we are on SMB, imo its pretty clear what you are trying to achieve. But if it cant be changed by a fairly simple check or try&except call its fine i guess. I just try to limit the amount of options the smb protocol has, there are already a lot (too much imo) |
Well I disagree with that... we have numerous options to get things such as users, groups, disks, computers, etc all under the SMB protocol. |
| if self.gpo_name: | ||
| if k == "displayname": | ||
| context.log.highlight(f"Display Name: {v}") | ||
| elif k == "name": | ||
| context.log.highlight(f"GUID: {v}") | ||
| else: | ||
| context.log.highlight(f"{k}: {v}") |
There was a problem hiding this comment.
Any specific reason you only "pretty print" the key&value pair if self.gpo_name is set and not always?
There was a problem hiding this comment.
I'll double check but I believe because there's random (default?) GPOs?
| self.logger.debug(f"Sharing violation on {remote_path}: {e}") | ||
| return False | ||
| except Exception as e: | ||
| self.logger.debug(f"Other error when attempting to download file {remote_path}: {e}") |
There was a problem hiding this comment.
imo we should include the error message in the fail output not in the debug log
That is true but it is still listed in the |
|
why the heck did i/it close it lol |
Signed-off-by: Marshall Hallenbeck <Marshall.Hallenbeck@gmail.com>
I was initially going to have the get_gpos module have the ability to download all of them, hence the helper functions, but LDAP can only query certain GPO information, so it'd have to be another SMB module to download them all; however, the user can just take the GUID output from the module and pass it to
--get-folderget_gposmodule:--get-folderfeature: