Merge remote-tracking branch 'origin/utils_rewrite' into utils_rewrite

SpecterOps · Jul 26, 2024 · 1e30a51 · 1e30a51
2 parents 8652c1a + f80bc17
commit 1e30a51
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/src/CommonLib/WellKnownPrincipal.cs b/src/CommonLib/WellKnownPrincipal.cs
@@ -44,7 +44,7 @@ public static bool GetWellKnownPrincipal(string sid, out TypedPrincipal commonPr
                 "S-1-5-13" => new TypedPrincipal("Terminal Server Users", Label.Group),
                 "S-1-5-14" => new TypedPrincipal("Remote Interactive Logon", Label.Group),
                 "S-1-5-15" => new TypedPrincipal("This Organization", Label.Group),
-                "S-1-5-17" => new TypedPrincipal("IUSR", Label.Group),
+                "S-1-5-17" => new TypedPrincipal("IUSR", Label.User),
                 "S-1-5-18" => new TypedPrincipal("Local System", Label.User),
                 "S-1-5-19" => new TypedPrincipal("Local Service", Label.User),
                 "S-1-5-20" => new TypedPrincipal("Network Service", Label.User),
@@ -88,4 +88,4 @@ public static bool GetWellKnownPrincipal(string sid, out TypedPrincipal commonPr
             return commonPrincipal != null;
         }
     }
-}
+}
diff --git a/test/unit/WellKnownPrincipalTest.cs b/test/unit/WellKnownPrincipalTest.cs
@@ -78,7 +78,7 @@ private static (string sid, string name, Label label)[] GetWellKnownPrincipals()
                 ("S-1-5-13", "Terminal Server Users", Label.Group),
                 ("S-1-5-14", "Remote Interactive Logon", Label.Group),
                 ("S-1-5-15", "This Organization", Label.Group),
-                ("S-1-5-17", "IUSR", Label.Group),
+                ("S-1-5-17", "IUSR", Label.User),
                 ("S-1-5-18", "Local System", Label.User),
                 ("S-1-5-19", "Local Service", Label.User),
                 ("S-1-5-20", "Network Service", Label.User),
@@ -148,4 +148,4 @@ public void GetWellKnownPrincipal_NonWellKnown_ReturnsNull()
 
         #endregion
     }
-}
+}