Added the parse-memberships.py
script to provide group files for the tool DPAT, allowing operators to produce group-specific statistics for every group in a domain.
Performed a complete re-factor of the entire code base, removing thousands of lines of unnecessary code making the project easier to maintain or expand moving forward. Along with this were some additional features, including the addition of a json
configuration file allowing users to now specify a specific Neo4j
database. Another feature was the addition of a search command, allowing operators to search the list of cyphers for easier navigation of the menu and execution of commands. An additional script was added to the project add-owned.py
for marking users as owned or high-value in the database from a list file.
Added cyphers for the Users, Domain Users, Authenticated Users, and Everyone groups as well as a cypher for users with passwords set to never expire.
Added additional cyphers for the Users, Domain Users, Authenticated Users, and Everyone groups as well as owned principals.
Expanded cyphers for owned principals as well as the Users, Domain Users, Authenticated Users, and Everyone groups. Added additional cyphers for domains including cross-domain paths.
Added group-delegated CanRDP/Adminto cyphers for the Users, Domain Users, Authenticated Users, and Everyone groups as well as owned principals.
Added cyphers for additional relationships including: WriteSPN
, WriteAccountRestrictions
, HasSIDHistory
, and DumpSMSAPassword
. Made a modification to the add-owned.py
script to allow operators to unset node properties that have been previously modified.
Added cyphers for cross-domain DCSync
privileges as well as AdminTo
privileges to domain controllers. Also fixed some bugs.