Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update WellKnownPrincipal.cs #140

Merged
merged 3 commits into from
Jul 26, 2024
Merged

Conversation

Argentix03
Copy link
Contributor

Description

The correct type for the IUSR (S-1-5-17) is user, not group.
this small thing made a huge confusion for some people today :( i think this was caused from copy pasting s-1-5-15 the one above it in a fix long ago.

do not confuse IUSR type with IIS_IUSRS
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-identifiers

Motivation and Context

this small thing made a huge confusion for some people today :(
i think this was caused from copy pasting s-1-5-15 the one above it in a fix long ago.

How Has This Been Tested?

single run on empty dc with iis installed

Screenshots (if appropriate):

Types of changes

  • Chore (a change that does not modify the application functionality)
  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

  • Documentation updates are needed, and have been made accordingly.
  • I have added and/or updated tests to cover my changes.
  • All new and existing tests passed.
  • My changes include a database migration.

The correct type for this is user.  this small thing made a huge confusion for some people today :(
i think this was caused from copy pasting s-1-5-15 the one above it in a fix long ago.

do not confuse IUSR type with IIS_IUSRS
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-identifiers
Copy link

github-actions bot commented Jul 25, 2024

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

@Argentix03
Copy link
Contributor Author

I have read the CLA Document and I hereby sign the CLA

@rvazarkar
Copy link
Contributor

Could you retarget this against the utils_rewrite branch as this will be used starting this coming week?

@rvazarkar
Copy link
Contributor

You'll also need to fix the test in WellKnownPrincipalTest.cs

@Argentix03 Argentix03 changed the base branch from v3 to utils_rewrite July 25, 2024 20:18
@Argentix03
Copy link
Contributor Author

  • retarget branch
  • fix test

@rvazarkar
Copy link
Contributor

Thanks for the MR, looks great!

@rvazarkar rvazarkar merged commit f80bc17 into SpecterOps:utils_rewrite Jul 26, 2024
2 checks passed
@github-actions github-actions bot locked and limited conversation to collaborators Jul 26, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants