Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Extraction of password policies and some registry values from the GptTmpl file #52

Closed
wants to merge 15 commits into from
Closed

Extraction of password policies and some registry values from the GptTmpl file #52

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
4d3599a
chore: add datacontract tag to OutputWrapper
rvazarkar Mar 1, 2023
4b1271e
add extraction of password policies and some registry values
0cmenog Mar 16, 2023
48b4a08
tests and coverage for GPO parsing
0cmenog Mar 16, 2023
830e91d
add some tests for password policies and registry values
0cmenog Mar 20, 2023
99bfd4d
check the compatibility with SharpHound and minor change (comment)
0cmenog Mar 20, 2023
ccd5a5f
modification of a test: ProcessGPOTemplateFile's output is not empty …
0cmenog Mar 20, 2023
b26cbdf
add default values of password policies and registries
0cmenog Mar 20, 2023
d899326
no default value if nothing found
0cmenog Mar 20, 2023
82a7982
extracting the 4 lockout policies from gptTmpl.inf file
0cmenog May 11, 2023
f2b7d33
add the enforced GPOChanges' information to the json
0cmenog May 11, 2023
9f2b428
remove useless code
0cmenog May 25, 2023
81d241e
remove an out of date test
0cmenog May 25, 2023
756bcc4
merge with v3 branch
0cmenog Oct 24, 2023
f312535
add extraction of LDAP Channel Binding and Cached Logons
0cmenog Oct 24, 2023
e0551b6
Merge branch 'dev'
0cmenog Oct 24, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions src/CommonLib/OutputTypes/ResultingGPOChanges.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,13 +1,27 @@
using System;
using System.Collections.Generic;

namespace SharpHoundCommonLib.OutputTypes
{
public class ResultingGPOChanges
{
public GPOChanges Enforced;
public GPOChanges Unenforced;
public TypedPrincipal[] LocalAdmins { get; set; } = Array.Empty<TypedPrincipal>();
public TypedPrincipal[] RemoteDesktopUsers { get; set; } = Array.Empty<TypedPrincipal>();
public TypedPrincipal[] DcomUsers { get; set; } = Array.Empty<TypedPrincipal>();
public TypedPrincipal[] PSRemoteUsers { get; set; } = Array.Empty<TypedPrincipal>();
public bool BlockInheritance;
public TypedPrincipal[] AffectedComputers { get; set; } = Array.Empty<TypedPrincipal>();
}

public class GPOChanges
{
public Dictionary<string, int> PasswordPolicies = new();
public Dictionary<string, int> LockoutPolicies = new();
public Dictionary<string, bool> SMBSigning = new();
public Dictionary<string, bool> LDAPSigning = new();
public Dictionary<string, object> LMAuthenticationLevel = new();
public Dictionary<string, int> MSCache = new();
}
}
Loading
Loading