forked from p15670423/monkey
don't count DomainAdmins as shared admins
This commit is contained in:
parent
0025d242d7
commit
8ab880340f
|
@ -465,7 +465,7 @@ class Machine(object):
|
||||||
domain_admins = set()
|
domain_admins = set()
|
||||||
|
|
||||||
for dc in DCs:
|
for dc in DCs:
|
||||||
domain_admins |= dc.GetLocalAdminSids()
|
domain_admins |= dc.GetUsersByGroupSid(self.GetGroupSidByGroupName("Domain Admins"))
|
||||||
|
|
||||||
return domain_admins
|
return domain_admins
|
||||||
|
|
||||||
|
@ -851,6 +851,7 @@ class PassTheHashMap(object):
|
||||||
|
|
||||||
shared_admins |= (m.GetLocalAdminSids() & other.GetLocalAdminSids())
|
shared_admins |= (m.GetLocalAdminSids() & other.GetLocalAdminSids())
|
||||||
|
|
||||||
|
shared_admins -= m.GetDomainAdminsOfMachine()
|
||||||
return shared_admins
|
return shared_admins
|
||||||
|
|
||||||
def main():
|
def main():
|
||||||
|
|
Loading…
Reference in New Issue