Skip to content

Commit de78334

Browse files
committed
+v1.2
1 parent fce8cbf commit de78334

File tree

4 files changed

+3132
-188
lines changed

4 files changed

+3132
-188
lines changed

CHANGELOG.txt

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
-=v0.7=-
2+
- Initial release.
3+
4+
-=v0.8=-
5+
- Expanded delegation information pulled back.
6+
- GUID based rights assignment.
7+
- Added detection information.
8+
9+
-=v1.2=-
10+
- A number of old and new functions now support new parameters "--limit" and "--filter".
11+
- Added generic LDAP search capabilities.
12+
- Added function which takes a user or SID and converts it to a user and SID.
13+
- Modified the "--group" function. It will now either enumerate group members as before or if provided with a user, list user group memberships.
14+
- Added function to remove a user from a group.
15+
- Added function which finds all GPO objects, optionally displays their ACL.
16+
- Added function to abuse GPO permissions and add a user to the local BUILTIN\Administrators group.
17+
- Added function to abuse GPO permissions and add a token permission to a user (e.g. SeLoadDriverPrivilege).
18+
- Added function to abuse GPO permissions and add a User or Computer immediate task with or without special filtering.
19+
- Added function which can increase the User or Computer version of GPO AD objects.
20+
- Added function which lists out some default domain policy settings (e.g. MaximumPasswordAge).
21+
- Added function which can do DNS enumeration based on AD records (ADIDNS).
22+
- Added function which can identify accounts that have PASSWD_NOTREQD as part of their userAccountControl flags.
23+
- Added function which can set an SPN on an account or remove it.
24+
- Bugfix in "--spn" where it would only show the first SPN.

0 commit comments

Comments
 (0)