Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions filler.py
Original file line number Diff line number Diff line change
Expand Up @@ -103,11 +103,21 @@ def create_ad_enumeration_file(target_ip, hostname, domain, local_ip, user, pass
f.write(f"faketime -f +7h powerview {domain}/{user}@{target_ip} -k --no-pass --dc-ip {target_ip}\n")
f.write("\n")

# Password Policy Enumeration
f.write("## Password Policy Enumeration\n")
if user and password:
f.write(f"netexec smb {target_ip} -u '{user}' -p '{password}' --pass-pol\n")
f.write(f"crackmapexec smb {target_ip} -u '{user}' -p '{password}' --pass-pol\n")
else:
f.write(f"# Requires credentials for password policy enumeration\n")
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Okay, this could be useful, I think it's useful to put in this check.

f.write("\n")

#Password spraying
f.write("# Password Spray\n")
if user and password:
f.write(f"netexec smb {target_ip} -u users.txt -p '{password}' --continue-on-success\n")
else:
f.write(f"netexec smb {target_ip} -u users.txt -p passwords.txt --continue-on-success\n")
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I mean... you're supposed to spray the users list as the password also.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i changed it so there is output for both in order people to not forget to try users.txt for sprays

f.write(f"netexec smb {target_ip} -u users.txt -p users.txt --continue-on-success\n")
f.write("\n")

Expand Down