Skip to content

Rvn0xsy/PDacl

main
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 

PDacl

Play Doh Windows ACL Tools

相关阅读:Windows权限控制相关的防御与攻击技术

Introduction

PDAcl 是一个支持Windows活动目录扩展权限设置、Windows活动目录常规权限设置、Windows服务权限设置的命令工具。

PS C:\> .\PDAcl.exe -h
Play Doh Windows ACL Tools. - By Rvn0xsy
[@] Blog : https://payloads.online/
Usage: C:\PDAcl.exe [OPTIONS] SUBCOMMAND

Options:
  -h,--help                   Print this help message and exit

Subcommands:
  ADE                         ActiveDirectory ExtendRights
  AD                          ActiveDirectory Rights
  SC                          Service Rights



PS C:\> .\PDAcl.exe ADE -h
ActiveDirectory ExtendRights
Usage: C:\PDAcl.exe ADE [OPTIONS]

Options:
  -h,--help                   Print this help message and exit
  -a,--add                    Add Right to Object.
  -r,--remove                 Remove ActiveDirectory ExtendedRight
  -u,--user TEXT              Username,e.g. DomainName\Rvn0xsy.
  -e,--extended-right TEXT    ActiveDirectory ExtendedRight
  -s,--server TEXT            ActiveDirectory Server LDAP Path.
  --list                      List All ActiveDirectory ExtendedRights .
  --login TEXT                Login Use,e.g. Domain/Username@Password

Usage

添加DCSync权限

PDAcl.exe ADE -a -u domain\user1 -e DS-Replication-Get-Changes -s DC=domain,DC=com

移除DCSync权限

PDAcl.exe ADE -r -u domain\user1 -e DS-Replication-Get-Changes -s DC=domain,DC=com

添加计算机修改权限

PDAcl.exe AD -a -s CN=John-PC,CN=Computers,DC=Domain,DC=com -e ADS-Right-Generic-Write -u domain\user1

添加任意用户可修改的服务权限

PDAcl.exe SC -a -s ServiceName -e Service-All-Access -u Everyone

About

Play Doh Windows ACL Tools

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages