From 0d30181bafc7436068de249e7ea08b1c14bea384 Mon Sep 17 00:00:00 2001
From: Harmj0y <will@harmj0y.net>
Date: Tue, 29 Dec 2015 15:58:39 -0500
Subject: [PATCH] Added
 situational_awareness/network/powerview/find_managed_security_groups module
 implementing @stufus' recent changes

---
 .../powerview/find_managed_security_groups.py | 85 +++++++++++++++++++
 1 file changed, 85 insertions(+)
 create mode 100644 lib/modules/situational_awareness/network/powerview/find_managed_security_groups.py

diff --git a/lib/modules/situational_awareness/network/powerview/find_managed_security_groups.py b/lib/modules/situational_awareness/network/powerview/find_managed_security_groups.py
new file mode 100644
index 000000000..42a47dff7
--- /dev/null
+++ b/lib/modules/situational_awareness/network/powerview/find_managed_security_groups.py
@@ -0,0 +1,85 @@
+from lib.common import helpers
+
+class Module:
+
+    def __init__(self, mainMenu, params=[]):
+
+        self.info = {
+            'Name': 'Find-ManagedSecurityGroups',
+
+            'Author': ['@ukstufus'],
+
+            'Description': ('This function retrieves all security groups in the domain and identifies ones that '
+                            'have a manager set. It also determines whether the manager has the ability to add '
+                            'or remove members from the group.'),
+
+            'Background' : True,
+
+            'OutputExtension' : None,
+            
+            'NeedsAdmin' : False,
+
+            'OpsecSafe' : True,
+            
+            'MinPSVersion' : '2',
+            
+            'Comments': [
+                'https://github.com/PowerShellEmpire/Empire/pull/119'
+            ]
+        }
+
+        # any options needed by the module, settable during runtime
+        self.options = {
+            # format:
+            #   value_name : {description, required, default_value}
+            'Agent' : {
+                'Description'   :   'Agent to run module on.',
+                'Required'      :   True,
+                'Value'         :   ''
+            }
+        }
+
+        # save off a copy of the mainMenu object to access external functionality
+        #   like listeners/agent handlers/etc.
+        self.mainMenu = mainMenu
+
+        for param in params:
+            # parameter format is [Name, Value]
+            option, value = param
+            if option in self.options:
+                self.options[option]['Value'] = value
+
+
+    def generate(self):
+        
+        moduleName = self.info["Name"]
+        
+        # read in the common powerview.ps1 module source code
+        moduleSource = self.mainMenu.installPath + "/data/module_source/situational_awareness/network/powerview.ps1"
+
+        try:
+            f = open(moduleSource, 'r')
+        except:
+            print helpers.color("[!] Could not read module source path at: " + str(moduleSource))
+            return ""
+
+        moduleCode = f.read()
+        f.close()
+
+        # get just the code needed for the specified function
+        script = helpers.generate_dynamic_powershell_script(moduleCode, moduleName)
+
+        script += moduleName + " "
+
+        for option,values in self.options.iteritems():
+            if option.lower() != "agent":
+                if values['Value'] and values['Value'] != '':
+                    if values['Value'].lower() == "true":
+                        # if we're just adding a switch
+                        script += " -" + str(option)
+                    else:
+                        script += " -" + str(option) + " " + str(values['Value']) 
+
+        script += ' | Out-String | %{$_ + \"`n\"};"`n'+str(moduleName)+' completed!"'
+
+        return script