StandIn

StandIn copied to clipboard

Hello, New methods to list the servicePrincipalName based on this article: https://m365internals.com/2021/11/08/kerberoast-with-opsec/. To use the method, the option `--opsec` must be used. It will look for specific OU name (default...

guervild

Fixed PR for Authorized Signature Modification

1

@FuzzySecurity here's the fixed PR, feel free to delete the original monstrosity I posted Confirming authorized signatures are required: ``` C:\temp>StandIn.exe --adcs --filter HomelabTemplate [+] Search Base : LDAP://CN=Enrollment Services,CN=Public...

b1gbroth3r

Repalced `pKIExtendedKeyUsage` with `mspki-certificate-application-policy` for `--clientauth` as it seems like the latter is what actually provides Domain authentication, and allows for the impersonation. Only adding Client Authentication to the pKIExtendedKeyUsage...

funnybananas

Client Authentication added to wrong flag

1

`--clientauth` should add the "Client Authentication" Application Policy to `mspki-certificate-application-policy` not to the `pKIExtendedKeyUsage` property. Only adding it to `pKIExtendedKeyUsage` still does not allow for Domain user impersonation. #14

funnybananas

``` PS C:\Windows\system32> C:\StandIn.exe --sid loki [!] Insufficient arguments provided.. ``` would it also not be beneficial when a machine account gets created to automatically resolve the SID as well...

jfmaes

List current domain sites

1

Hey I just added a small feature to check sites in the current domain using the --site flag: ``` PS C:\Temp> .\StandIn.exe --site [?] Using DC : dc01.dojo.local |_ Domain...

guervild

GPO Add User Privilege Corrupts File

1

Hello! Thanks for the great tool, I am using it in a lab environment and I noticed that the "Add User Privilege" functionality can corrupt the `\\domain.com\SysVol\domain.com\Policies\{GPO GUID}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf` file...

davidmckennirey

Added Path parameter to specify search container

3

I added a path parameter to specify the search container. This is useful when looking up object properties or permissions, such as when checking Certificate Template access permissions.

TheWover

Setting a local admin supersedes any other policies which may apply. Because of this, users will show as being removed from the local admin group. Need to find a solution...

FuzzySecurity

FuzzySecurity