p15670423
/
monkey
1
0
Fork 5
Code Issues Pull Requests 3 Projects Releases Wiki Activity

add list of the users that share each password

This commit is contained in:
Oran Nadler 2018-04-17 13:12:57 +03:00
parent cdadb32ff0
commit 2c68cca5db
1 changed files with 19 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
monkey_island/cc/resources/pthmap.py
View File

@ -310,7 +310,16 @@ class Machine(object):
@cache @cache
def GetLocalAdmins(self): def GetLocalAdmins(self):
return set(self.GetUsersByGroupSid(self.GetGroupSidByGroupName("Administrators")).keys()) admins = self.GetUsersByGroupSid(self.GetGroupSidByGroupName("Administrators"))
#debug = self.GetUsersByGroupSid(self.GetGroupSidByGroupName("Users"))
#admins.update(debug)
return admins
@cache
def GetLocalAdminSids(self):
return set(self.GetLocalAdmins().keys())
@cache @cache
def GetLocalSids(self): def GetLocalSids(self):
@ -325,7 +334,7 @@ class Machine(object):
@cache @cache
def GetLocalAdminNames(self): def GetLocalAdminNames(self):
return set(self.GetUsersByGroupSid(self.GetGroupSidByGroupName("Administrators")).values()) return set(self.GetLocalAdmins().values())
@cache @cache
def GetSam(self): def GetSam(self):
@ -452,13 +461,13 @@ class Machine(object):
domain_admins = set() domain_admins = set()
for dc in DCs: for dc in DCs:
domain_admins |= dc.GetLocalAdmins() domain_admins |= dc.GetLocalAdminSids()
return domain_admins return domain_admins
@cache @cache
def GetAdmins(self): def GetAdmins(self):
return self.GetLocalAdmins() | self.GetDomainAdminsOfMachine() return self.GetLocalAdminSids() | self.GetDomainAdminsOfMachine()
@cache @cache
def GetAdminNames(self): def GetAdminNames(self):
@ -820,11 +829,16 @@ def main():
dups = dict(map(lambda x: (x, len(pth.GetSidsBySecret(x))), pth.GetAllSecrets())) dups = dict(map(lambda x: (x, len(pth.GetSidsBySecret(x))), pth.GetAllSecrets()))
print """<table>""" print """<table>"""
print """<tr><th>Secret</th><th>User Count</th></tr>""" print """<tr><th>Secret</th><th>User Count</th><th>Users That Share This Password</th></tr>"""
for secret, count in sorted(dups.iteritems(), key=lambda (k,v): (v,k), reverse=True): for secret, count in sorted(dups.iteritems(), key=lambda (k,v): (v,k), reverse=True):
if count <= 1: if count <= 1:
continue continue
print """<tr><td><a href="#{secret}">{secret}</a></td><td>{count}</td>""".format(secret=secret, count=count) print """<tr><td><a href="#{secret}">{secret}</a></td><td>{count}</td>""".format(secret=secret, count=count)
print """<td><ul>"""
for sid in pth.GetSidsBySecret(secret):
print """<li>{username}"""
print """<li><a href="#{sid}">{username}</a></li>""".format(sid=sid, username=pth.GetUsernameBySid(sid))
print """</ul></td></tr>"""
print """</table>""" print """</table>"""
print "<h2>Cached Passwords</h2>" print "<h2>Cached Passwords</h2>"