Fix BloodHoundAD#35

Remove unwanted filter on OU/Domain object. This filter should only be used on GPC objects
Hackndo · Nov 22, 2021 · f1197e7 · f1197e7
1 parent 7615860
commit f1197e7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/SharpHound3/LdapBuilder.cs b/SharpHound3/LdapBuilder.cs
@@ -87,7 +87,7 @@ internal static LdapQueryData BuildLdapQuery(CollectionMethodResolved methods)
             {
                 //ldapFilterParts.Add("(&(&(objectcategory=groupPolicyContainer)(flags=*))(name=*)(gpcfilesyspath=*))");
                 //ldapProperties.AddRange(new[] {"gpcfilesyspath", "displayname"});
-                ldapFilterParts.Add("(&(|(objectcategory=organizationalUnit)(objectclass=domain))(gplink=*)(flags=*))");
+                ldapFilterParts.Add("(&(|(objectcategory=organizationalUnit)(objectclass=domain))(gplink=*))");
                 ldapProperties.AddRange(new[] { "gplink", "name" });
             }