Added rbcd attack script

[ShutdownRepo]

Hi there 👋 this script is inspired and mostly based on existing code found on:

• https://github.com/tothi/rbcd-attack
• https://github.com/NinjaStyle82/rbcd_permissions

I see this as an improvement to the existing scripts mentioned above as this one can

• pass-the-hash/ticket/key/cache, ...
• write new SIDs to the msDS-AllowedToActOnBehalfOfOtherIdentity
• remove specific entries of that property (instead of flushing everything kill-bill style)
• flush all entries of that property
• read entries and resolve SIDs to sAMaccountnames
• doesn't need full dinstinguished names as arguments (the scripts uses ldapdomaindump)

Co-author: @p0dalirius

More info about this: Kerberos delegation attacks

[0xdeaddood]

Hi @ShutdownRepo and @p0dalirius !

Great implementation! Just one thing, we need to modify the header to keep the same style in all the examples.

Thanks!!

[ShutdownRepo]

Yup agreed! Thanks for doing the change!

[0xdeaddood]

Thanks a lot guys! Merging...