GUI fixes

lkarlslund · Mar 29, 2022 · 5dbf235 · 5dbf235
1 parent 2ee1f2c
commit 5dbf235
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 10 deletions.
diff --git a/modules/analyze/html/adalanche.css b/modules/analyze/html/adalanche.css
@@ -93,6 +93,10 @@ body {
   margin-right: 5px;
 }
 
+.input-group div {
+  margin-bottom: 5px;
+}
+
 .checkbox-button input[type='checkbox'],
 .checkbox-button input[type='radio'] {
   display: none;

diff --git a/modules/analyze/html/custom.js b/modules/analyze/html/custom.js
@@ -50,7 +50,7 @@ function setquery(
         }
     }
     if (mode) {
-        setquerymode(mode);
+        set_querymode(mode);
     }
     if (maxoutgoing) {
         $('#maxoutgoing').val(maxoutgoing);
@@ -69,12 +69,6 @@ function set_querymode(mode) {
     $('#querymode_sourcetarget').prop('checked', mode == 'sourcetarget');
 }
 
-function setquerymode(mode) {
-    normal = mode == 'Normal';
-    $('#querymode_normal').prop('checked', normal);
-    $('#querymode_reverse').prop('checked', !normal);
-}
-
 function window_front(win) {
     if (!win.hasClass('window-front')) {
         $('#windows div').removeClass('window-front');
@@ -422,6 +416,7 @@ $(function () {
         dataType: 'json',
         success: function (data) {
             buttons = `<table class="w-full">`;
+            data.methods.sort((a, b) => (a.name > b.name) ? 1 : -1)
             for (i in data.methods) {
                 method = data.methods[i];
 
@@ -476,6 +471,7 @@ $(function () {
             buttons += '</table>';
             $('#pwnfilter').html(buttons);
 
+            data.objecttypes.sort((a, b) => (a.name > b.name) ? 1 : -1)
             buttons = `<table class="w-full">`;
             for (i in data.objecttypes) {
                 objecttype = data.objecttypes[i];

diff --git a/modules/analyze/html/index.html b/modules/analyze/html/index.html
@@ -85,7 +85,7 @@
                     aria-label="Mode">
                     <input type="radio" name="mode" id="querymode_normal" value="normal" autocomplete="off" checked />
                     <label class="btn btn-sm" for="querymode_normal">Normal</label>
-                    <input type="radio" name="mode" id="querymode_reverse" value="inverted" autocomplete="off" />
+                    <input type="radio" name="mode" id="querymode_reverse" value="reverse" autocomplete="off" />
                     <label class="btn btn-sm" for="querymode_reverse">Reverse</label>
                     <input type="radio" name="mode" id="querymode_sourcetarget" value="sourcetarget" autocomplete="off" />
                     <label class="btn btn-sm" for="querymode_sourcetarget">SrcTgt</label>
@@ -260,8 +260,8 @@
               <li class="dropdown-item"
                 query="(&(objectCategory=PKI-Certificate-Template)(msPKI-Certificate-Name-Flag:and:=1)(|(pKIExtendedKeyUsage=1.3.6.1.5.5.7.3.2)(pKIExtendedKeyUsage=1.3.5.1.5.2.3.4)(pKIExtendedKeyUsage=1.3.6.1.4.1.311.20.2.2)(pKIExtendedKeyUsage=2.5.29.37.0)(pKIExtendedKeyUsage:count:=0)))"
                 mode="Normal" depth=99 methods="default">Client cert templates with custom SAN (pose as anyone)</li>
-              <li class="dropdown-item" query="(|(objectSid=S-1-5-21-*-513)(objectSid=S-1-5-11))" mode="Reverse"
-                depth=99 methods="default">What can Domain Users and Authenticated Users do?</li>
+              <li class="dropdown-item" query="(|(objectSid=S-1-5-21-*-513)(objectSid=S-1-5-11)(objectSid=S-1-1-0))" mode="Reverse"
+                depth=99 methods="default">What can Domain Users, Authenticated Users and Everyone do?</li>
               <li class="dropdown-item"
                 query="(&(objectCategory=Group)(|(name=*vcenter*)(name=*vmware*)(name=*esxi*)(name=*vsan*)(name=*simplivity*)))"
                 mode="Normal" depth=99 methods="default">Who can dump a virtual DC? (hypervisor/SAN sounding groups)</li>