Additional LDAP Interactive Shell Features

[UNC1739]

I've added some additional features to the LDAP Interactive Shell to facilitate exploitation of Active Directory ACL attack paths from an LDAP relaying attack. To facilitate this I've added the following new commands:

• add_computer - Introduces the ability to add a new computer to the domain.
• change_password - Introduces the ability to change the password associated with a user or computer account.
• clear_rbcd - Ability to clear the "msDS-AllowedToActOnBehalfOfOtherIdentity" attribute post-exploitation.
• disable_account - Ability to disable a previously enabled user-account.
• enable_account - Ability to enable a previously disabled user-account.
• get_laps_password - Attempts to read the LAPS password associated with a given computer account.
• grant_control - Writes to the DACL associated with an object to grant control of the object to another object within Active Directory. The grant_control primitive is often useful when exploiting ACL attack paths with the “WriteDACL” or “Owns” edge.
• set_dontreqpreauth - The ability to enable or disable the "do not require Kerberos pre-authentication" setting for an arbitrary user account.
• set_rbcd - Configure resource-based constrained delegation (RBCD) to permit a grantee to impersonate arbitrary users to the target host.

Here are some examples of the new commands. Below we leverage the set_rbcd command to configure resource-based constrained delegation:

[martingalloar]

LGTM, tested almost all of the new commands (don't have LAPS configured in my env). At some point I think we might want to review and make our error and print messages more consistent across tools/commands.

This are great and helpful additions! Thanks @adamcrosser!

[UNC1739]

Thanks for the review @martingalloar! Now that the pull request is approved, do you know when this might be merged into the master branch?

[0xdeaddood]

Thanks for the review @martingalloar! Now that the pull request is approved, do you know when this might be merged into the master branch?

Right now 😃. Thanks for the PR @adamcrosser, this is great!
Thanks for checking @martingalloar, merging...

[dirkjanm]

this is great work!