Thursday, August 20, 2020

Goddi (Go Dump Domain Info) - Dumps Active Directory Domain Information



Based on work from Scott Sutherland (@_nullbind), Antti Rantasaari, Eric Gruber (@egru), Will Schroeder (@harmj0y), and the PowerView authors.

Install
Use the executables in the releases section. If you want to build it yourself, make sure that your go environment is setup according to the Go setup doc. The goddi package also uses the below package.
go get gopkg.in/ldap.v2

Windows
Tested on Windows 10 and 8.1 (go1.10 windows/amd64).

Linux
Tested on Kali Linux (go1.10 linux/amd64).
  • umount, mount, and cifs-utils need to be installed for mapping a share for GetGPP
apt-get update
apt-get install -y mount cifs-utils
  • make sure nothing is mounted at /mnt/goddi/
  • make sure to run with sudo

Run
When run, will default to using TLS (tls.Client method) over 636. On Linux, make sure to run with sudo.
  • username: Target user. Required parameter.
  • password: Target user's password. Required parameter.
  • domain: Full domain name. Required parameter.
  • dc: DC to target. Can be either an IP or full hostname. Required parameter.
  • startTLS: Use to StartTLS over 389.
  • unsafe: Use for a plaintext connection.
PS C:\Users\Administrator\Desktop> .\godditest-windows-amd64.exe -username=testuser -password="testpass!" -domain="test.local" -dc="dc.test.local" -unsafe
[i] Begin PLAINTEXT LDAP connection to 'dc.test.local'...
[i] PLAINTEXT LDAP connection to 'dc.test.local' successful...
[i] Begin BIND...
[i] BIND with 'testuser' successful...
[i] Begin dump domain info...
[i] Domain Trusts: 1 found
[i] Domain Controllers: 1 found
[i] Users: 12 found
[*] Warning: keyword 'pass' found!
[*] Warning: keyword 'fall' found!
[i] Domain Admins: 4 users found
[i] Enterprise Admins: 1 users found
[i] Forest Admins: 0 users found
[i] Locked Users: 0 found
[i] Disabled Users: 2 found
[i] Groups: 45 found
[i] Domain Sites: 1 found
[i] Domain Subnets: 0 found
[i] Domain Computers: 17 found
[i] Deligated Users: 0 found
[i] Users with passwords not set to expire: 6 found
[i] Machine Accounts with passwords older than 45 days: 18 found
[i] Domain OUs: 8 found
[i] Domain Account Policy found
[i] Domain GPOs: 7 found
[i] FSMO Roles: 3 found
[i] SPNs: 122 found
[i] LAPS passwords: 0 found
[i] GPP enumeration starting. This can take a bit...
[i] GPP passwords: 7 found
[i] CSVs written to 'csv' directory in C:\Users\Administrator\Desktop
[i] Execution took 1.4217256s...
[i] Exiting...

Functionality
StartTLS and TLS (tls.Client func) connections supported. Connections over TLS are default. All output goes to CSVs and are created in /csv/ in the current working directory. Dumps:
  • Domain users. Also searches Description for keywords and prints to a seperate csv ex. "Password" was found in the domain user description.
  • Users in priveleged user groups (DA, EA, FA).
  • Users with passwords not set to expire.
  • User accounts that have been locked or disabled.
  • Machine accounts with passwords older than 45 days.
  • Domain Computers.
  • Domain Controllers.
  • Sites and Subnets.
  • SPNs and includes csv flag if domain admin (a flag to note SPNs that are DAs in the SPN CSV output).
  • Trusted domain relationships.
  • Domain Groups.
  • Domain OUs.
  • Domain Account Policy.
  • Domain deligation users.
  • Domain GPOs.
  • Domain FSMO roles.
  • LAPS passwords.
  • GPP passwords. On Windows, defaults to mapping Q. If used, will try another mapping until success R, S, etc... On Linux, /mnt/goddi is used.


More info


  1. Hacker Tools Mac
  2. Game Hacking
  3. Hacking Tools Free Download
  4. What Are Hacking Tools
  5. Hack Rom Tools
  6. Pentest Tools Kali Linux
  7. Hacking Tools Kit
  8. Hacker Tools Hardware
  9. Hacking Tools Usb
  10. Hacker Tools For Pc
  11. Hackers Toolbox
  12. Tools 4 Hack
  13. Pentest Tools For Windows
  14. Pentest Automation Tools
  15. Free Pentest Tools For Windows
  16. Hacker Tools Apk Download
  17. Pentest Tools Port Scanner
  18. Hacking Tools Kit
  19. Hacking Tools 2019
  20. Usb Pentest Tools
  21. Blackhat Hacker Tools
  22. Hacker Tools Windows
  23. What Are Hacking Tools
  24. Pentest Tools Open Source
  25. How To Hack
  26. Pentest Tools For Ubuntu
  27. Hacker Tools Mac
  28. Hacking Tools Name
  29. Hak5 Tools
  30. Hacker Tools Github
  31. Hacking App
  32. Pentest Tools Alternative
  33. Pentest Box Tools Download
  34. Pentest Tools List
  35. Pentest Tools Kali Linux
  36. Hacker Tools Windows
  37. Hack Tools Online
  38. Hack Rom Tools
  39. Nsa Hack Tools Download
  40. Github Hacking Tools
  41. Pentest Tools Review
  42. Hacking Tools And Software
  43. Pentest Tools Download
  44. What Are Hacking Tools
  45. Pentest Tools For Mac
  46. How To Install Pentest Tools In Ubuntu
  47. Hack Tool Apk No Root
  48. Hacking Tools Windows 10
  49. Pentest Tools Bluekeep
  50. Pentest Tools Find Subdomains
  51. Hacking Tools
  52. Best Pentesting Tools 2018
  53. Pentest Tools Free
  54. Hacks And Tools
  55. Hacking Tools Pc
  56. Nsa Hack Tools Download
  57. Hacking Tools Online
  58. Hack Tools For Windows
  59. Pentest Tools Website Vulnerability
  60. Pentest Tools Nmap
  61. Underground Hacker Sites
  62. Best Hacking Tools 2019
  63. Hacking Tools For Pc
  64. Hacking Tools 2020
  65. Hacking Tools For Windows 7
  66. Nsa Hacker Tools
  67. Hacker Tools Free
  68. Hacker Tools Online
  69. Hacker Tools Apk Download
  70. Hacker Tool Kit
  71. Hacking Tools For Mac
  72. Hacker Tools For Windows
  73. Hack Tools Pc
  74. Hacking Apps
  75. Hack Tools For Windows
  76. Hacking Tools Windows
  77. Pentest Tools Framework
  78. Hacking App
  79. Hacking Tools Software
  80. Github Hacking Tools
  81. Hacker Tools Hardware
  82. Pentest Tools Alternative
  83. Pentest Tools Url Fuzzer
  84. Hacking Tools 2020
  85. Hacker Tools For Mac
  86. Best Hacking Tools 2020
  87. Hacking Tools For Games
  88. Hacking Apps
  89. Hack Tools Mac
  90. Hacker Tool Kit
  91. Hacking Tools 2019
  92. Tools For Hacker
  93. Pentest Reporting Tools
  94. Underground Hacker Sites
  95. Hacking Tools And Software
  96. Hacking Tools Usb
  97. Pentest Tools For Ubuntu
  98. Hacker Techniques Tools And Incident Handling
  99. New Hacker Tools
  100. Pentest Tools Framework
  101. Hacking Tools Software
  102. Hacker Tools For Mac
  103. Hacker Tools Apk Download
  104. Hacking App
  105. Pentest Tools For Ubuntu
  106. Usb Pentest Tools
  107. Blackhat Hacker Tools
  108. Best Hacking Tools 2020

0 comments:

Post a Comment