mattifestation/PowerSploit — pull request #53 by pjhartlieb (2014-08-22 17:59:16+00:00)
Title: initial pull request

Hi Matt,

The domain_enum module is intended to support post-exploitation activities from within the user context on the target domain. It will enumerate domain computers, servers, users, groups, group membership(s), sites, subnets, and subnets per site and save the results to one or more files. Whenever possible it will also enumerate computers, servers, users, groups, and group membership per OU. It's really intended to establish situational awareness once you drop onto "patient 0" and set you up to make the most of who you pivot to. We had previously used a big long list of dsquery/dsget "klik" scripts to gather the same data. This lets the attacker keep it all wrapped up in a single module. It requires dsquery and dsget to be resident on the system. They must also be executable in plain user context. I need to finish up the email function and I plan to add more as we go. This started out as just an exercise and it turned out a bit better than I expected ;). A readme file is soon to follow. It's really simple compared to the other ninja scripts in here. Put is does save me some time. Thanks.

-pjh