utils

package
v2.3.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Mar 20, 2024 License: MIT Imports: 13 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	UAC_SCRIPT                         = 0x00000001
	UAC_ACCOUNTDISABLE                 = 0x00000002
	UAC_HOMEDIR_REQUIRED               = 0x00000008
	UAC_LOCKOUT                        = 0x00000010
	UAC_PASSWD_NOTREQD                 = 0x00000020
	UAC_PASSWD_CANT_CHANGE             = 0x00000040
	UAC_ENCRYPTED_TEXT_PWD_ALLOWED     = 0x00000080
	UAC_TEMP_DUPLICATE_ACCOUNT         = 0x00000100
	UAC_NORMAL_ACCOUNT                 = 0x00000200
	UAC_INTERDOMAIN_TRUST_ACCOUNT      = 0x00000800
	UAC_WORKSTATION_TRUST_ACCOUNT      = 0x00001000
	UAC_SERVER_TRUST_ACCOUNT           = 0x00002000
	UAC_DONT_EXPIRE_PASSWORD           = 0x00010000
	UAC_MNS_LOGON_ACCOUNT              = 0x00020000
	UAC_SMARTCARD_REQUIRED             = 0x00040000
	UAC_TRUSTED_FOR_DELEGATION         = 0x00080000
	UAC_NOT_DELEGATED                  = 0x00100000
	UAC_USE_DES_KEY_ONLY               = 0x00200000
	UAC_DONT_REQ_PREAUTH               = 0x00400000
	UAC_PASSWORD_EXPIRED               = 0x00800000
	UAC_TRUSTED_TO_AUTH_FOR_DELEGATION = 0x01000000
	UAC_PARTIAL_SECRETS_ACCOUNT        = 0x04000000
)

Constants for userAccountControl flags

View Source 
const (
	SE_DACL_AUTO_INHERIT_REQ = 0x00000100
	SE_DACL_AUTO_INHERITED   = 0x00000400
	SE_DACL_SACL_DEFAULTED   = 0x00000008
	SE_DACL_PRESENT          = 0x00000004
	SE_DACL_PROTECTED        = 0x00001000
	SE_GROUP_DEFAULTED       = 0x00000002
	SE_OWNER_DEFAULTED       = 0x00000001
	SE_RM_CONTROL_VALID      = 0x00004000
	SE_SACL_AUTO_INHERIT_REQ = 0x00000200
	SE_SACL_AUTO_INHERITED   = 0x00000800
	SE_SACL_PRESENT          = 0x00000010
	SE_SACL_PROTECTED        = 0x00002000
	SE_SELF_RELATIVE         = 0x00008000
)

Constants for Security Descriptor's Control Flags

Variables

View Source 
var EmojiMap = map[string]string{
	"root":                     "🌳",
	"user":                     "👤",
	"computer":                 "💻",
	"group":                    "👥",
	"organizationalUnit":       "📂",
	"container":                "📁",
	"person":                   "👨",
	"organizationalPerson":     "👔",
	"groupOfNames":             "📇",
	"domain":                   "🌐",
	"domainDNS":                "🔗",
	"builtinDomain":            "🏠",
	"groupPolicyContainer":     "⚙️",
	"foreignSecurityPrincipal": "🌍",
	"contact":                  "📞",
	"printQueue":               "🖨️",
	"volume":                   "📦",
	"publicFolder":             "📬",
	"serviceConnectionPoint":   "🔌",
	"msExchExchangeServer":     "📧",
	"msExchStorageGroup":       "🗃️",
	"subnet":                   "🕸️",
	"site":                     "📍",
}
View Source 
var GroupTypeMap = map[int]string{
	2:           "Global Distribution Group",
	4:           "Domain Local Distribution Group",
	8:           "Universal Distribution Group",
	-2147483646: "Global Security Group",
	-2147483644: "Domain Local Security Group",
	-2147483643: "Builtin Group",
	-2147483640: "Universal Security Group",
}

groupType descriptions

View Source 
var InstanceTypeMap = map[int]string{
	1:  "NamingContextHead",
	2:  "NotInstantiatedReplica",
	4:  "WritableObject",
	8:  "ParentNamingContextHeld",
	16: "FirstNamingContextConstruction",
	32: "NamingContextRemovalFromDSA",
}

instanceType descriptions

View Source 
var PredefinedLdapQueries = map[string][]LibQuery{
	"Enum": []LibQuery{
		LibQuery{"All Organizational Units", "(objectCategory=organizationalUnit)"},
		LibQuery{"All Containers", "(objectCategory=container)"},
		LibQuery{"All Groups", "(objectCategory=group)"},
		LibQuery{"All Computers", "(objectClass=computer)"},
		LibQuery{"All Users", "(&(objectCategory=person)(objectClass=user))"},
		LibQuery{"All Objects", "(objectClass=*)"},
	},
	"Users": []LibQuery{
		LibQuery{"Recently Created Users", "(&(objectCategory=user)(whenCreated>=<timestamp1d>))"},
		LibQuery{"Users With Description", "(&(objectCategory=user)(description=*))"},
		LibQuery{"Users Without Email", "(&(objectCategory=user)(!(mail=*)))"},
		LibQuery{"Likely Service Users", "(&(objectCategory=user)(sAMAccountName=*svc*))"},
		LibQuery{"Disabled Users", "(&(objectCategory=user)(userAccountControl:1.2.840.113556.1.4.803:=2))"},
		LibQuery{"Expired Users", "(&(objectCategory=user)(accountExpires<=<timestamp>))"},
		LibQuery{"Users With Sensitive Infos", "(&(objectCategory=user)(|(telephoneNumber=*)(pager=*)(homePhone=*)(mobile=*)(info=*)(streetAddress=*)))"},
		LibQuery{"Inactive Users", "(&(objectCategory=user)(lastLogonTimestamp<=<timestamp30d>))"},
	},
	"Computers": []LibQuery{
		LibQuery{"Domain Controllers", "(&(objectCategory=computer)(userAccountControl:1.2.840.113556.1.4.803:=8192))"},
		LibQuery{"Non-DC Servers", "(&(objectCategory=computer)(operatingSystem=*server*)(!(userAccountControl:1.2.840.113556.1.4.803:=8192)))"},
		LibQuery{"Non-Server Computers", "(&(objectCategory=computer)(!(operatingSystem=*server*))(!(userAccountControl:1.2.840.113556.1.4.803:=8192)))"},
		LibQuery{"Stale Computers", "(&(objectCategory=computer)(!lastLogonTimestamp=*))"},
		LibQuery{"Computers With Outdated OS", "(&(objectCategory=computer)(|(operatingSystem=*Server 2008*)(operatingSystem=*Server 2003*)(operatingSystem=*Windows XP*)(operatingSystem=*Windows 7*)))"},
	},
	"Security": []LibQuery{
		LibQuery{"Domain Admins", "(&(objectCategory=user)(memberOf=CN=Domain Admins,CN=Users,DC=domain,DC=com))"},
		LibQuery{"Administrators", "(&(objectCategory=user)(memberOf=CN=Administrators,CN=Builtin,DC=domain,DC=com))"},
		LibQuery{"High Privilege Users", "(&(objectCategory=user)(adminCount=1))"},
		LibQuery{"Users With SPN", "(&(objectCategory=user)(servicePrincipalName=*))"},
		LibQuery{"Users With SIDHistory", "(&(objectCategory=person)(objectClass=user)(sidHistory=*))"},
		LibQuery{"KrbPreauth Disabled Users", "(&(objectCategory=person)(userAccountControl:1.2.840.113556.1.4.803:=4194304))"},
		LibQuery{"KrbPreauth Disabled Computers", "(&(objectCategory=computer)(userAccountControl:1.2.840.113556.1.4.803:=4194304))"},
		LibQuery{"Constrained Delegation Objects", "(msDS-AllowedToDelegateTo=*)"},
		LibQuery{"Unconstrained Delegation Objects", "(userAccountControl:1.2.840.113556.1.4.803:=524288)"},
		LibQuery{"RBCD Objects", "(msDS-AllowedToActOnBehalfOfOtherIdentity=*)"},
		LibQuery{"Not Trusted For Delegation", "(&(samaccountname=*)(userAccountControl:1.2.840.113556.1.4.803:=1048576))"},
		LibQuery{"Shadow Credentials Targets", "(msDS-KeyCredentialLink=*)"},
		LibQuery{"Must Change Password Users", "(&(objectCategory=person)(objectClass=user)(pwdLastSet=0)(!(useraccountcontrol:1.2.840.113556.1.4.803:=2)))"},
		LibQuery{"Password Never Changed Users", "(&(objectCategory=user)(pwdLastSet=0))"},
		LibQuery{"Never Expire Password Users", "(&(objectCategory=user)(userAccountControl:1.2.840.113556.1.4.803:=65536))"},
		LibQuery{"Empty Password Users", "(&(objectCategory=user)(userAccountControl:1.2.840.113556.1.4.803:=32))"},
		LibQuery{"LockedOut Users", "(&(objectCategory=user)(lockoutTime>=1))"},
	},
}
View Source 
var RidMap = map[int]string{
	500: "Administrator",
	501: "Guest",
	502: "KRBTGT (Key Distribution Center Service Account)",
	512: "Domain Admins",
	513: "Domain Users",
	514: "Domain Guests",
	515: "Domain Computers",
	516: "Domain Controllers",
	517: "Cert Publishers",
	518: "Schema Admins",
	519: "Enterprise Admins",
	520: "Group Policy Creator Owners",
	526: "Key Admins",
	527: "Enterprise Key Admins",
	553: "RAS and IAS Servers",
	554: "Trusted for Delegation Computers",
	555: "Protected Users",
	572: "Cloneable Domain Controllers",
	573: "Read-only Domain Controllers",
	590: "Backup Operators",
	591: "Print Operators",
	592: "Server Operators",
	593: "Account Operators",
	594: "Replicator",
	596: "Incoming Forest Trust Builders",
	597: "Performance Monitor Users",
	598: "Performance Log Users",
	599: "Windows Authorization Access Group",
	600: "Network Configuration Operators",
	601: "Incoming Forest Trust Builders",
	606: "Cryptographic Operators",
	607: "Event Log Readers",
}

Relative ID (RID) descriptions

View Source 
var SAMAccountTypeMap = map[int]string{
	0x00000000: "Domain Object",
	0x10000000: "Group Object",
	0x10000001: "Non-Security Group Object",
	0x30000000: "User Object",
	0x30000001: "Machine Account",
	0x20000000: "Alias Object",
	0x20000001: "Non-Security Alias Object",
	0x30000002: "Trust Account",
	0x40000000: "App Basic Group",
	0x40000001: "App Query Group",
}

sAMAccountType descriptions

View Source 
var SDControlFlags = map[int]string{
	SE_DACL_AUTO_INHERIT_REQ: "SE_DACL_AUTO_INHERIT_REQ",
	SE_DACL_AUTO_INHERITED:   "SE_DACL_AUTO_INHERITED",
	SE_DACL_SACL_DEFAULTED:   "SE_DACL_SACL_DEFAULTED",
	SE_DACL_PRESENT:          "SE_DACL_PRESENT",
	SE_DACL_PROTECTED:        "SE_DACL_PROTECTED",
	SE_GROUP_DEFAULTED:       "SE_GROUP_DEFAULTED",
	SE_OWNER_DEFAULTED:       "SE_OWNER_DEFAULTED",
	SE_RM_CONTROL_VALID:      "SE_RM_CONTROL_VALID",
	SE_SACL_AUTO_INHERIT_REQ: "SE_SACL_AUTO_INHERIT_REQ",
	SE_SACL_AUTO_INHERITED:   "SE_SACL_AUTO_INHERITED",
	SE_SACL_PRESENT:          "SE_SACL_PRESENT",
	SE_SACL_PROTECTED:        "SE_SACL_PROTECTED",
	SE_SELF_RELATIVE:         "SE_SELF_RELATIVE",
}
View Source 
var UacFlags = map[int]flagDesc{
	UAC_SCRIPT:                         flagDesc{"Script", ""},
	UAC_ACCOUNTDISABLE:                 flagDesc{"Disabled", "Enabled"},
	UAC_HOMEDIR_REQUIRED:               flagDesc{"HomeDirRequired", ""},
	UAC_LOCKOUT:                        flagDesc{"LockedOut", ""},
	UAC_PASSWD_NOTREQD:                 flagDesc{"PwdNotRequired", ""},
	UAC_PASSWD_CANT_CHANGE:             flagDesc{"CannotChangePwd", ""},
	UAC_ENCRYPTED_TEXT_PWD_ALLOWED:     flagDesc{"EncryptedTextPwdAllowed", ""},
	UAC_TEMP_DUPLICATE_ACCOUNT:         flagDesc{"TmpDuplicateAccount", ""},
	UAC_NORMAL_ACCOUNT:                 flagDesc{"NormalAccount", ""},
	UAC_INTERDOMAIN_TRUST_ACCOUNT:      flagDesc{"InterdomainTrustAccount", ""},
	UAC_WORKSTATION_TRUST_ACCOUNT:      flagDesc{"WorkstationTrustAccount", ""},
	UAC_SERVER_TRUST_ACCOUNT:           flagDesc{"ServerTrustAccount", ""},
	UAC_DONT_EXPIRE_PASSWORD:           flagDesc{"DoNotExpirePwd", ""},
	UAC_MNS_LOGON_ACCOUNT:              flagDesc{"MNSLogonAccount", ""},
	UAC_SMARTCARD_REQUIRED:             flagDesc{"SmartcardRequired", ""},
	UAC_TRUSTED_FOR_DELEGATION:         flagDesc{"TrustedForDelegation", ""},
	UAC_NOT_DELEGATED:                  flagDesc{"NotDelegated", ""},
	UAC_USE_DES_KEY_ONLY:               flagDesc{"UseDESKeyOnly", ""},
	UAC_DONT_REQ_PREAUTH:               flagDesc{"DoNotRequirePreauth", ""},
	UAC_PASSWORD_EXPIRED:               flagDesc{"PwdExpired", "PwdNotExpired"},
	UAC_TRUSTED_TO_AUTH_FOR_DELEGATION: flagDesc{"TrustedToAuthForDelegation", ""},
	UAC_PARTIAL_SECRETS_ACCOUNT:        flagDesc{"PartialSecretsAccount", ""},
}
View Source 
var WellKnownSIDsMap = map[string]string{
	"S-1-0-0":    "Null SID",
	"S-1-1-0":    "Everyone",
	"S-1-2-0":    "Local",
	"S-1-2-1":    "Console Logon",
	"S-1-3-0":    "Creator Owner ID",
	"S-1-3-1":    "Creator Group ID",
	"S-1-3-2":    "Creator Owner Server",
	"S-1-3-3":    "Creator Group Server",
	"S-1-3-4":    "Owner Rights",
	"S-1-4":      "Non-Unique Authority",
	"S-1-5":      "NT Authority",
	"S-1-5-80-0": "All Services",
	"S-1-5-1":    "Dialup",
	"S-1-5-113":  "Local Account",
	"S-1-5-114":  "Local account and member of Administrators group",
	"S-1-5-2":    "Network",
	"S-1-5-3":    "Batch",
	"S-1-5-4":    "Interactive",
	"S-1-5-6":    "Serivce",
	"S-1-5-7":    "Anonymous Logon",
	"S-1-5-8":    "Proxy",
	"S-1-5-9":    "Enterprise Domain Controllers",
	"S-1-5-10":   "Self",
	"S-1-5-11":   "Authenticated Users",
	"S-1-5-12":   "Restricted Code",
	"S-1-5-13":   "Terminal Server User",
	"S-1-5-14":   "Remote Interactive Logon",
	"S-1-5-15":   "This Organization",
	"S-1-5-17":   "IUSR",
	"S-1-5-18":   "SYSTEM",
	"S-1-5-19":   "NT Authority (LocalService)",
	"S-1-5-20":   "Network Service",
}

Functions

func Capitalize 

func Capitalize(str string) string

func ConvertGUID 

func ConvertGUID(portion string) string

func ConvertSID 

func ConvertSID(hexSID string) (SID string)

func EncodeGUID 

func EncodeGUID(guid string) (string, error)

func EncodeSID 

func EncodeSID(sid string) (string, error)

TODO: Review correctness of this function

func EndianConvert 

func EndianConvert(sd string) (newSD string)

func FormatLDAPAttribute 

func FormatLDAPAttribute(attr *ldap.EntryAttribute) []string

func GetAttrCellColor 

func GetAttrCellColor(cellName string, cellValue string) (string, bool)

func GetTimeDistString 

func GetTimeDistString(diff time.Duration) string

func HexToDecimalString 

func HexToDecimalString(hex string) (decimal string)

func HexToInt 

func HexToInt(hex string) (integer int)

func HexToOffset 

func HexToOffset(hex string) (integer int64)

func IndexOf 

func IndexOf[T comparable](collection []T, el T) int

func IsSID 

func IsSID(s string) bool

func SamOrDN 

func SamOrDN(object string) (string, bool)

Types

type ControlMicrosoftSDFlags 

type ControlMicrosoftSDFlags struct {
	Criticality  bool
	ControlValue int32
}

func (*ControlMicrosoftSDFlags) Encode 

func (c *ControlMicrosoftSDFlags) Encode() *ber.Packet

func (*ControlMicrosoftSDFlags) GetControlType 

func (c *ControlMicrosoftSDFlags) GetControlType() string

func (*ControlMicrosoftSDFlags) String 

func (c *ControlMicrosoftSDFlags) String() string

type LDAPConn 

type LDAPConn struct {
	Conn       *ldap.Conn
	PagingSize uint32
	RootDN     string
}

Basic LDAP connection type

func NewLDAPConn 

func NewLDAPConn(ldapServer string, ldapPort int, ldaps bool, tlsConfig *tls.Config, pagingSize uint32, rootDN string, proxyConn net.Conn) (*LDAPConn, error)

func (*LDAPConn) AddAttribute 

func (lc *LDAPConn) AddAttribute(targetDN string, attributeToAdd string, attributeValues []string) error

Attributes

func (*LDAPConn) AddComputer 

func (lc *LDAPConn) AddComputer(objectName string, parentDN string) error

func (*LDAPConn) AddContainer 

func (lc *LDAPConn) AddContainer(objectName string, parentDN string) error

func (*LDAPConn) AddGroup 

func (lc *LDAPConn) AddGroup(objectName string, parentDN string) error

func (*LDAPConn) AddOrganizationalUnit 

func (lc *LDAPConn) AddOrganizationalUnit(objectName string, parentDN string) error

func (*LDAPConn) AddUser 

func (lc *LDAPConn) AddUser(objectName string, parentDN string) error

func (*LDAPConn) DeleteAttribute 

func (lc *LDAPConn) DeleteAttribute(targetDN string, attributeToDelete string) error

func (*LDAPConn) DeleteObject 

func (lc *LDAPConn) DeleteObject(targetDN string) error

Objects

func (*LDAPConn) FindFirstAttr 

func (lc *LDAPConn) FindFirstAttr(filter string, attr string) (string, error)

func (*LDAPConn) FindNamingContexts 

func (lc *LDAPConn) FindNamingContexts() ([]string, error)

func (*LDAPConn) FindPrimaryGroupForSID 

func (lc *LDAPConn) FindPrimaryGroupForSID(SID string) (groupSID string, err error)

func (*LDAPConn) FindRootDN 

func (lc *LDAPConn) FindRootDN() (string, error)

func (*LDAPConn) FindRootFQDN 

func (lc *LDAPConn) FindRootFQDN() (string, error)

func (*LDAPConn) FindSIDForObject 

func (lc *LDAPConn) FindSIDForObject(object string) (SID string, err error)

func (*LDAPConn) FindSamForSID 

func (lc *LDAPConn) FindSamForSID(SID string) (resolvedSID string, err error)

func (*LDAPConn) FindSchemaClassesAndAttributes 

func (lc *LDAPConn) FindSchemaClassesAndAttributes() (map[string]string, map[string]string, error)

func (*LDAPConn) FindSchemaControlAccessRights 

func (lc *LDAPConn) FindSchemaControlAccessRights(filter string) (map[string]string, error)

func (*LDAPConn) GetSecurityDescriptor 

func (lc *LDAPConn) GetSecurityDescriptor(object string) (queryResult string, err error)

func (*LDAPConn) LDAPBind 

func (lc *LDAPConn) LDAPBind(ldapUsername string, ldapPassword string) error

func (*LDAPConn) ModifyAttribute 

func (lc *LDAPConn) ModifyAttribute(targetDN string, attributeToModify string, attributeValues []string) error

func (*LDAPConn) ModifyDACL 

func (lc *LDAPConn) ModifyDACL(objectName string, newSD string) error

func (*LDAPConn) MoveObject 

func (lc *LDAPConn) MoveObject(sourceDN string, targetDN string) error

func (*LDAPConn) NTLMBindWithHash 

func (lc *LDAPConn) NTLMBindWithHash(ntlmDomain string, ntlmUsername string, ntlmHash string) error

func (*LDAPConn) Query 

func (lc *LDAPConn) Query(baseDN string, searchFilter string, scope int, showDeleted bool) ([]*ldap.Entry, error)

Search

func (*LDAPConn) QueryGroupMembers 

func (lc *LDAPConn) QueryGroupMembers(groupName string) (group []*ldap.Entry, err error)

func (*LDAPConn) QueryUserGroups 

func (lc *LDAPConn) QueryUserGroups(userName string) ([]*ldap.Entry, error)

func (*LDAPConn) ResetPassword 

func (lc *LDAPConn) ResetPassword(objectDN string, newPassword string) error

func (*LDAPConn) UpgradeToTLS 

func (lc *LDAPConn) UpgradeToTLS(tlsConfig *tls.Config) error

type LibQuery added in v2.2.0 

type LibQuery struct {
	Title  string
	Filter string
}

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.