patch-4
pussycat0x 2024-07-04 19:09:04 +05:30
parent ee56a1641f
commit 49f0f2ba8f
2 changed files with 0 additions and 93 deletions

View File

@ -1,47 +0,0 @@
id: ldap-get-ad-grp
info:
name: LDAP Get Active Directory Group - Enumeration
author: pussycat0x
severity: info
description: |
Attempts to list the supported capabilities in a SMBv2 server for each enabled dialect.
reference:
- https://docs.projectdiscovery.io/templates/protocols/javascript/modules/ldap.Client#getadgroups
metadata:
max-request: 1
shodan-query: ldap
tags: js,network,ldap,enum
javascript:
- code: |
const ldap = require('nuclei/ldap');
const cfg = new ldap.Config();
cfg.Upgrade = true;
const client = new ldap.Client(Host, Port, cfg);
const groups = client.GetADGroups();
const bytes = require('nuclei/bytes');
const buffer = new bytes.Buffer();
for (const group of groups) {
buffer.WriteString("DistinguishedName: '" + group.DistinguishedName+ "' ,");
buffer.WriteString("SAMAccountName: '" + group.SAMAccountName+ "' ,");
buffer.WriteString("PWDLastSet: '" + group.PWDLastSet+ "' ,");
buffer.WriteString("LastLogon: '" + group.LastLogon+ "' ,");
buffer.WriteString("MemberOf: '" + group.MemberOf+ "' ,");
buffer.WriteString("ServicePrincipalName: '" + group.ServicePrincipalName+ "' ,");
}
Export(buffer.String());
args:
Host: "ldap://{{Host}}"
Port: 389
matchers:
- type: dsl
dsl:
- "success == true"
extractors:
- type: dsl
dsl:
- response

View File

@ -1,46 +0,0 @@
id: ldap-get-ad-users
info:
name: LDAP Get Active Directory User - Enumeration
author: pussycat0x
severity: info
description: |
Retrieve users from Active Directory, where each user is represented by an ADObject.
reference:
- https://docs.projectdiscovery.io/templates/protocols/javascript/modules/ldap.ADObject
metadata:
max-request: 1
shodan-query: ldap
tags: js,network,ldap,enum
javascript:
- code: |
const ldap = require('nuclei/ldap');
const cfg = new ldap.Config();
cfg.Upgrade = true;
const client = ldap.Client(Host, Port, cfg);
const users = client.GetADUsers();
const bytes = require('nuclei/bytes');
const buffer = new bytes.Buffer();
for (const user of users) {
buffer.WriteString("DistinguishedName: '" + user.DistinguishedName+ "' ,");
buffer.WriteString("SAMAccountName: '" + user.SAMAccountName+ "' ,");
buffer.WriteString("PWDLastSet: '" + user.PWDLastSet+ "' ,");
buffer.WriteString("LastLogon: '" + user.LastLogon+ "' ,");
buffer.WriteString("MemberOf: '" + user.MemberOf+ "' ,");
buffer.WriteString("ServicePrincipalName: '" + user.ServicePrincipalName+ "' ,");
}
Export(buffer.String());
args:
Host: "ldap://{{Host}}"
Port: 389
matchers:
- type: dsl
dsl:
- "success == true"
extractors:
- type: dsl
dsl:
- response