Based on work from Scott Sutherland (@_nullbind), Antti Rantasaari, Eric Gruber (@egru), Will Schroeder (@harmj0y), and the PowerView authors.
Install
Use the executables in the releases section. If you want to build it yourself, make sure that your go environment is setup according to the Go setup doc. The goddi package also uses the below package.
go get gopkg.in/ldap.v2
Windows
Tested on Windows 10 and 8.1 (go1.10 windows/amd64).
Linux
Tested on Kali Linux (go1.10 linux/amd64).
- umount, mount, and cifs-utils need to be installed for mapping a share for GetGPP
apt-get update
apt-get install -y mount cifs-utils
- make sure nothing is mounted at /mnt/goddi/
- make sure to run with
sudo
Run
When run, will default to using TLS (tls.Client method) over 636. On Linux, make sure to run with
sudo
.- username: Target user. Required parameter.
- password: Target user's password. Required parameter.
- domain: Full domain name. Required parameter.
- dc: DC to target. Can be either an IP or full hostname. Required parameter.
- startTLS: Use to StartTLS over 389.
- unsafe: Use for a plaintext connection.
PS C:\Users\Administrator\Desktop> .\godditest-windows-amd64.exe -username=testuser -password="testpass!" -domain="test.local" -dc="dc.test.local" -unsafe
[i] Begin PLAINTEXT LDAP connection to 'dc.test.local'...
[i] PLAINTEXT LDAP connection to 'dc.test.local' successful...
[i] Begin BIND...
[i] BIND with 'testuser' successful...
[i] Begin dump domain info...
[i] Domain Trusts: 1 found
[i] Domain Controllers: 1 found
[i] Users: 12 found
[*] Warning: keyword 'pass' found!
[*] Warning: keyword 'fall' found!
[i] Domain Admins: 4 users found
[i] Enterprise Admins: 1 users found
[i] Forest Admins: 0 users found
[i] Locked Users: 0 found
[i] Disabled Users: 2 found
[i] Groups: 45 found
[i] Domain Sites: 1 found
[i] Domain Subnets: 0 found
[i] Domain Computers: 17 found
[i] Deligated Users: 0 found
[i] Users with passwords not set to expire: 6 found
[i] Machine Accounts with passwords older than 45 days: 18 found
[i] Domain OUs: 8 found
[i] Domain Account Policy found
[i] Domain GPOs: 7 found
[i] FSMO Roles: 3 found
[i] SPNs: 122 found
[i] LAPS passwords: 0 found
[i] GPP enumeration starting. This can take a bit...
[i] GPP passwords: 7 found
[i] CSVs written to 'csv' directory in C:\Users\Administrator\Desktop
[i] Execution took 1.4217256s...
[i] Exiting...
Functionality
StartTLS and TLS (tls.Client func) connections supported. Connections over TLS are default. All output goes to CSVs and are created in /csv/ in the current working directory. Dumps:
- Domain users. Also searches Description for keywords and prints to a seperate csv ex. "Password" was found in the domain user description.
- Users in priveleged user groups (DA, EA, FA).
- Users with passwords not set to expire.
- User accounts that have been locked or disabled.
- Machine accounts with passwords older than 45 days.
- Domain Computers.
- Domain Controllers.
- Sites and Subnets.
- SPNs and includes csv flag if domain admin (a flag to note SPNs that are DAs in the SPN CSV output).
- Trusted domain relationships.
- Domain Groups.
- Domain OUs.
- Domain Account Policy.
- Domain deligation users.
- Domain GPOs.
- Domain FSMO roles.
- LAPS passwords.
- GPP passwords. On Windows, defaults to mapping Q. If used, will try another mapping until success R, S, etc... On Linux, /mnt/goddi is used.
- Hacking Tools 2020
- Pentest Tools Bluekeep
- Best Hacking Tools 2019
- Hak5 Tools
- Hacker Tools
- Hack Tools Pc
- Hacking Tools Windows
- Underground Hacker Sites
- Nsa Hack Tools Download
- Hacker Tools Free Download
- Hacker Tools For Mac
- Hacker Security Tools
- New Hack Tools
- Ethical Hacker Tools
- Pentest Tools For Mac
- Hacking Apps
- Hacker Tools Software
- Tools Used For Hacking
- Underground Hacker Sites
- Hacker Tools Free Download
- Hacker Tools
- Wifi Hacker Tools For Windows
- Hacking Tools For Pc
- Hacker Tools Free Download
- Nsa Hack Tools
- Android Hack Tools Github
- Beginner Hacker Tools
- Pentest Tools Website Vulnerability
- Hacking Tools Kit
- Hacker Tools Hardware
- Hacks And Tools
- Hack App
- Hack And Tools
- Android Hack Tools Github
- Hack Tools For Ubuntu
- Hacker Tools Linux
- Kik Hack Tools
- Hack Tools For Mac
- Blackhat Hacker Tools
- Tools Used For Hacking
- Bluetooth Hacking Tools Kali
- Hak5 Tools
- Hackers Toolbox
- Hacking Tools For Games
- Install Pentest Tools Ubuntu
- Pentest Tools Apk
- Growth Hacker Tools
- Hacker Tools Windows
- Hack Tools Pc
- Hacking Tools
- Pentest Tools Find Subdomains
- Hacking Tools Online
- Hackers Toolbox
- Android Hack Tools Github
- Hacking Tools
- Hacks And Tools
- Hacker Techniques Tools And Incident Handling
- Top Pentest Tools
- Hacking Tools 2019
- Pentest Tools Website
- How To Make Hacking Tools
- Hacking Tools For Mac
- Termux Hacking Tools 2019
- Hacking Tools Windows
- Hackrf Tools
- Pentest Tools For Windows
- Hack Tools
- Hacking Tools
- Hacker Tools Free
- Pentest Tools For Ubuntu
- Free Pentest Tools For Windows
- Hacker Techniques Tools And Incident Handling
- Hak5 Tools
- Physical Pentest Tools
- Pentest Tools For Ubuntu
- Computer Hacker
- Underground Hacker Sites
- How To Make Hacking Tools
- Hacking Tools Free Download
- Hack Tools 2019
- Usb Pentest Tools
- Nsa Hack Tools
- Hacker Search Tools
- Hacking Tools For Windows
- Hack Tools
- Hacking Tools Software
- Hack Rom Tools
- Hacking Tools Pc
- Hacker Tools For Pc
- Hacker Search Tools
- Kik Hack Tools
- Hacker Tools Apk
- Pentest Tools For Mac
- Hack Tools Download
- Pentest Tools Website Vulnerability
- Pentest Tools For Mac
- Pentest Box Tools Download
- Beginner Hacker Tools
- Hacker Tools For Pc
- Computer Hacker
- Blackhat Hacker Tools
- Hack Tools Github
- Hack Tools Mac
- Hack Tools
- Hacker Tools Online
- Pentest Tools Url Fuzzer
- Blackhat Hacker Tools
- Blackhat Hacker Tools
- Tools Used For Hacking
- Hacking Tools
- Pentest Tools List
- Hacker Tools 2019
- Hacker Techniques Tools And Incident Handling
- Hacker Tools List
- Hacking Tools Free Download
- Pentest Tools Apk
- Pentest Tools Online
- Wifi Hacker Tools For Windows
- Beginner Hacker Tools
- Hacking Tools Kit
No comments:
Post a Comment