This repository has been archived by the owner on Jan 29, 2020. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 2.8k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Added situational_awareness/network/powerview/find_managed_security_g…
…roups module implementing @stufus' recent changes
- Loading branch information
Showing
1 changed file
with
85 additions
and
0 deletions.
There are no files selected for viewing
85 changes: 85 additions & 0 deletions
85
lib/modules/situational_awareness/network/powerview/find_managed_security_groups.py
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,85 @@ | ||
from lib.common import helpers | ||
|
||
class Module: | ||
|
||
def __init__(self, mainMenu, params=[]): | ||
|
||
self.info = { | ||
'Name': 'Find-ManagedSecurityGroups', | ||
|
||
'Author': ['@ukstufus'], | ||
|
||
'Description': ('This function retrieves all security groups in the domain and identifies ones that ' | ||
'have a manager set. It also determines whether the manager has the ability to add ' | ||
'or remove members from the group.'), | ||
|
||
'Background' : True, | ||
|
||
'OutputExtension' : None, | ||
|
||
'NeedsAdmin' : False, | ||
|
||
'OpsecSafe' : True, | ||
|
||
'MinPSVersion' : '2', | ||
|
||
'Comments': [ | ||
'https://github.com/PowerShellEmpire/Empire/pull/119' | ||
] | ||
} | ||
|
||
# any options needed by the module, settable during runtime | ||
self.options = { | ||
# format: | ||
# value_name : {description, required, default_value} | ||
'Agent' : { | ||
'Description' : 'Agent to run module on.', | ||
'Required' : True, | ||
'Value' : '' | ||
} | ||
} | ||
|
||
# save off a copy of the mainMenu object to access external functionality | ||
# like listeners/agent handlers/etc. | ||
self.mainMenu = mainMenu | ||
|
||
for param in params: | ||
# parameter format is [Name, Value] | ||
option, value = param | ||
if option in self.options: | ||
self.options[option]['Value'] = value | ||
|
||
|
||
def generate(self): | ||
|
||
moduleName = self.info["Name"] | ||
|
||
# read in the common powerview.ps1 module source code | ||
moduleSource = self.mainMenu.installPath + "/data/module_source/situational_awareness/network/powerview.ps1" | ||
|
||
try: | ||
f = open(moduleSource, 'r') | ||
except: | ||
print helpers.color("[!] Could not read module source path at: " + str(moduleSource)) | ||
return "" | ||
|
||
moduleCode = f.read() | ||
f.close() | ||
|
||
# get just the code needed for the specified function | ||
script = helpers.generate_dynamic_powershell_script(moduleCode, moduleName) | ||
|
||
script += moduleName + " " | ||
|
||
for option,values in self.options.iteritems(): | ||
if option.lower() != "agent": | ||
if values['Value'] and values['Value'] != '': | ||
if values['Value'].lower() == "true": | ||
# if we're just adding a switch | ||
script += " -" + str(option) | ||
else: | ||
script += " -" + str(option) + " " + str(values['Value']) | ||
|
||
script += ' | Out-String | %{$_ + \"`n\"};"`n'+str(moduleName)+' completed!"' | ||
|
||
return script |