Fix BUG SpecterOps#70

godylockz · Sep 13, 2023 · 764106f · 764106f
1 parent 4ddf1b2
commit 764106f
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/src/CommonLib/Processors/ACLProcessor.cs b/src/CommonLib/Processors/ACLProcessor.cs
@@ -243,8 +243,7 @@ public IEnumerable<ACE> ProcessACL(byte[] ntSecurityDescriptor, string objectDom
                 //Cool ACE courtesy of @rookuu. Allows a principal to add itself to a group and no one else
                 if (aceRights.HasFlag(ActiveDirectoryRights.Self) &&
                     !aceRights.HasFlag(ActiveDirectoryRights.WriteProperty) &&
-                    !aceRights.HasFlag(ActiveDirectoryRights.GenericWrite) && objectType == Label.Group &&
-                    aceType == ACEGuids.WriteMember)
+                    !aceRights.HasFlag(ActiveDirectoryRights.GenericWrite) && objectType == Label.Group)
                     yield return new ACE
                     {
                         PrincipalType = resolvedPrincipal.ObjectType,