Comments (4)
Not sure on how accurate/effective this would be, but can try to whip up some test PoC this week on assessment to check it out. So idea would just be Get-NetUser and filter on users with userprincipalname not ending with the fqdn of the domain queried?
from powertools.
yeah that was my thought, we have been hitting domains with large amounts of users, 10k+. which make us reluctant to use methods which retrieve all users etc :)
I tried it, but didn't get any hits, but that could just be because there is none and didn't verify with the vanilla technique.
from powertools.
Good point, will try to keep in mind to check that out on any engagements coming up.
Since it's a different approach (foreign users in a domain vs. users in foreign groups), would it warrant a different cmdlet name? Also, any idea for better names for Find-UserTrustGroup and Find-GroupTrustUser? I know they're confusing, but struggling to articulate the description in a short cmdlet name haha.
from powertools.
Unfortunately I don't think that wildcards are possible on member or member of :(
I have been doing some additional LDAP optimizing and speedups, so Find-GroupTrustUser should have about a 3-4x speedup, but it still needs to pull full group data objects from the given domain unfortunately.
We didn't see any matches for the userprincipalname approach on our last engagement, so I'm thinking about putting this approach on hold until we see it flag in an env once.
from powertools.
Related Issues (20)
- Typo Line 38 ReflectivePick.cpp HOT 1
- Invoke-StealthUserHunter Get-NetFileServers grabs ALL Users HOT 1
- Get-NetGroup fails with Large > 1500 members HOT 6
- StealthUserHunter redundant WINDOWS4.dev.testlab.local HOT 1
- Get-Proxy settings HOT 7
- Get-OUs HOT 4
- Get-DFSShares HOT 12
- Get-UnattendedInstallFiles looking for incorrect filename HOT 2
- Support -Credential option for Invoke-FileFinder HOT 7
- Get-GptTmpl non domain joined User/PC HOT 2
- PageSize set in individual functions HOT 2
- PowerUp WebConfig Misparsed HOT 5
- Powershell signing HOT 4
- PowerView:Invoke-MapDomainTrust Exception
- Errors when Importing into Powershell HOT 2
- Wik-Readme.md PowerView 2.0 bad cmdlet name
- Error 0x80070005 in Invoke_WMI HOT 1
- Get-NetUser | select cn not working HOT 2
- Issue on startup
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from powertools.