metasploit-framework icon indicating copy to clipboard operation
metasploit-framework copied to clipboard

Deprecate domain_list_gen script

Open bcoles opened this issue 2 years ago • 0 comments

Removes ./scripts/meterpreter/domain_list_gen.rb.

Scripts are deprecated and no longer supported. #7789

Scripts were deprecated more than 5 years ago.

The domain_list_gen script is effectively replaced by post/windows/gather/enum_domain_group_users. The script and module were written by the same person and are almost identical. The output is effectively identical. The module is more feature-complete.

msf6 post(windows/gather/enum_domain_group_users) > set session 20
session => 20
msf6 post(windows/gather/enum_domain_group_users) > set GROUP Domain Admins
GROUP => Domain Admins
msf6 post(windows/gather/enum_domain_group_users) > run

[*] Running module against WIN-17B09RRRJTG
[*] Found users in Domain Admins
[*] 	CORP\Administrator
[*] Current session running as CORP\user is not a member of Domain Admins
[+] User list stored in /root/.msf4/loot/20220813025739_default_192.168.200.218_domain.group.mem_935985.txt
[*] Post module execution completed
msf6 post(windows/gather/enum_domain_group_users) > sessions -i 20
[*] Starting interaction with 20...

meterpreter > run domain_list_gen
[*] found users will be saved to /root/.msf4/logs/scripts/domain_admins/WIN-17B09RRRJTG_20220813.5746.txt
[*] Accounts Found:
[*] 	CORP\Administrator
[-] Current session running as CORP\user is not running as Domain Admin
meterpreter > 

There are also other modules such as post/windows/gather/enum_domain_tokens which offer more functionality.

bcoles avatar Aug 13 '22 07:08 bcoles