TIME

NEPAL QATAR BELFAST, UK MALAYSIA DUBAI

Sunday, August 30, 2020

Goddi (Go Dump Domain Info) - Dumps Active Directory Domain Information



Based on work from Scott Sutherland (@_nullbind), Antti Rantasaari, Eric Gruber (@egru), Will Schroeder (@harmj0y), and the PowerView authors.

Install
Use the executables in the releases section. If you want to build it yourself, make sure that your go environment is setup according to the Go setup doc. The goddi package also uses the below package.
go get gopkg.in/ldap.v2

Windows
Tested on Windows 10 and 8.1 (go1.10 windows/amd64).

Linux
Tested on Kali Linux (go1.10 linux/amd64).
  • umount, mount, and cifs-utils need to be installed for mapping a share for GetGPP
apt-get update
apt-get install -y mount cifs-utils
  • make sure nothing is mounted at /mnt/goddi/
  • make sure to run with sudo

Run
When run, will default to using TLS (tls.Client method) over 636. On Linux, make sure to run with sudo.
  • username: Target user. Required parameter.
  • password: Target user's password. Required parameter.
  • domain: Full domain name. Required parameter.
  • dc: DC to target. Can be either an IP or full hostname. Required parameter.
  • startTLS: Use to StartTLS over 389.
  • unsafe: Use for a plaintext connection.
PS C:\Users\Administrator\Desktop> .\godditest-windows-amd64.exe -username=testuser -password="testpass!" -domain="test.local" -dc="dc.test.local" -unsafe
[i] Begin PLAINTEXT LDAP connection to 'dc.test.local'...
[i] PLAINTEXT LDAP connection to 'dc.test.local' successful...
[i] Begin BIND...
[i] BIND with 'testuser' successful...
[i] Begin dump domain info...
[i] Domain Trusts: 1 found
[i] Domain Controllers: 1 found
[i] Users: 12 found
[*] Warning: keyword 'pass' found!
[*] Warning: keyword 'fall' found!
[i] Domain Admins: 4 users found
[i] Enterprise Admins: 1 users found
[i] Forest Admins: 0 users found
[i] Locked Users: 0 found
[i] Disabled Users: 2 found
[i] Groups: 45 found
[i] Domain Sites: 1 found
[i] Domain Subnets: 0 found
[i] Domain Computers: 17 found
[i] Deligated Users: 0 found
[i] Users with passwords not set to expire: 6 found
[i] Machine Accounts with passwords older than 45 days: 18 found
[i] Domain OUs: 8 found
[i] Domain Account Policy found
[i] Domain GPOs: 7 found
[i] FSMO Roles: 3 found
[i] SPNs: 122 found
[i] LAPS passwords: 0 found
[i] GPP enumeration starting. This can take a bit...
[i] GPP passwords: 7 found
[i] CSVs written to 'csv' directory in C:\Users\Administrator\Desktop
[i] Execution took 1.4217256s...
[i] Exiting...

Functionality
StartTLS and TLS (tls.Client func) connections supported. Connections over TLS are default. All output goes to CSVs and are created in /csv/ in the current working directory. Dumps:
  • Domain users. Also searches Description for keywords and prints to a seperate csv ex. "Password" was found in the domain user description.
  • Users in priveleged user groups (DA, EA, FA).
  • Users with passwords not set to expire.
  • User accounts that have been locked or disabled.
  • Machine accounts with passwords older than 45 days.
  • Domain Computers.
  • Domain Controllers.
  • Sites and Subnets.
  • SPNs and includes csv flag if domain admin (a flag to note SPNs that are DAs in the SPN CSV output).
  • Trusted domain relationships.
  • Domain Groups.
  • Domain OUs.
  • Domain Account Policy.
  • Domain deligation users.
  • Domain GPOs.
  • Domain FSMO roles.
  • LAPS passwords.
  • GPP passwords. On Windows, defaults to mapping Q. If used, will try another mapping until success R, S, etc... On Linux, /mnt/goddi is used.


Related articles
  1. Hacking Tools 2020
  2. Pentest Tools Bluekeep
  3. Best Hacking Tools 2019
  4. Hak5 Tools
  5. Hacker Tools
  6. Hack Tools Pc
  7. Hacking Tools Windows
  8. Underground Hacker Sites
  9. Nsa Hack Tools Download
  10. Hacker Tools Free Download
  11. Hacker Tools For Mac
  12. Hacker Security Tools
  13. New Hack Tools
  14. Ethical Hacker Tools
  15. Pentest Tools For Mac
  16. Hacking Apps
  17. Hacker Tools Software
  18. Tools Used For Hacking
  19. Underground Hacker Sites
  20. Hacker Tools Free Download
  21. Hacker Tools
  22. Wifi Hacker Tools For Windows
  23. Hacking Tools For Pc
  24. Hacker Tools Free Download
  25. Nsa Hack Tools
  26. Android Hack Tools Github
  27. Beginner Hacker Tools
  28. Pentest Tools Website Vulnerability
  29. Hacking Tools Kit
  30. Hacker Tools Hardware
  31. Hacks And Tools
  32. Hack App
  33. Hack And Tools
  34. Android Hack Tools Github
  35. Hack Tools For Ubuntu
  36. Hacker Tools Linux
  37. Kik Hack Tools
  38. Hack Tools For Mac
  39. Blackhat Hacker Tools
  40. Tools Used For Hacking
  41. Bluetooth Hacking Tools Kali
  42. Hak5 Tools
  43. Hackers Toolbox
  44. Hacking Tools For Games
  45. Install Pentest Tools Ubuntu
  46. Pentest Tools Apk
  47. Growth Hacker Tools
  48. Hacker Tools Windows
  49. Hack Tools Pc
  50. Hacking Tools
  51. Pentest Tools Find Subdomains
  52. Hacking Tools Online
  53. Hackers Toolbox
  54. Android Hack Tools Github
  55. Hacking Tools
  56. Hacks And Tools
  57. Hacker Techniques Tools And Incident Handling
  58. Top Pentest Tools
  59. Hacking Tools 2019
  60. Pentest Tools Website
  61. How To Make Hacking Tools
  62. Hacking Tools For Mac
  63. Termux Hacking Tools 2019
  64. Hacking Tools Windows
  65. Hackrf Tools
  66. Pentest Tools For Windows
  67. Hack Tools
  68. Hacking Tools
  69. Hacker Tools Free
  70. Pentest Tools For Ubuntu
  71. Free Pentest Tools For Windows
  72. Hacker Techniques Tools And Incident Handling
  73. Hak5 Tools
  74. Physical Pentest Tools
  75. Pentest Tools For Ubuntu
  76. Computer Hacker
  77. Underground Hacker Sites
  78. How To Make Hacking Tools
  79. Hacking Tools Free Download
  80. Hack Tools 2019
  81. Usb Pentest Tools
  82. Nsa Hack Tools
  83. Hacker Search Tools
  84. Hacking Tools For Windows
  85. Hack Tools
  86. Hacking Tools Software
  87. Hack Rom Tools
  88. Hacking Tools Pc
  89. Hacker Tools For Pc
  90. Hacker Search Tools
  91. Kik Hack Tools
  92. Hacker Tools Apk
  93. Pentest Tools For Mac
  94. Hack Tools Download
  95. Pentest Tools Website Vulnerability
  96. Pentest Tools For Mac
  97. Pentest Box Tools Download
  98. Beginner Hacker Tools
  99. Hacker Tools For Pc
  100. Computer Hacker
  101. Blackhat Hacker Tools
  102. Hack Tools Github
  103. Hack Tools Mac
  104. Hack Tools
  105. Hacker Tools Online
  106. Pentest Tools Url Fuzzer
  107. Blackhat Hacker Tools
  108. Blackhat Hacker Tools
  109. Tools Used For Hacking
  110. Hacking Tools
  111. Pentest Tools List
  112. Hacker Tools 2019
  113. Hacker Techniques Tools And Incident Handling
  114. Hacker Tools List
  115. Hacking Tools Free Download
  116. Pentest Tools Apk
  117. Pentest Tools Online
  118. Wifi Hacker Tools For Windows
  119. Beginner Hacker Tools
  120. Hacking Tools Kit

No comments:

Post a Comment