From b994efc418e34ea7675e770b45e0419cf5555461 Mon Sep 17 00:00:00 2001
From: mpgn <martial.puygrenier@gmail.com>
Date: Tue, 21 Mar 2023 17:07:18 -0400
Subject: [PATCH] add warning when dumping ntds

---
 cme/crackmapexec.py | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/cme/crackmapexec.py b/cme/crackmapexec.py
index 4919cc91..1d79cf36 100755
--- a/cme/crackmapexec.py
+++ b/cme/crackmapexec.py
@@ -302,6 +302,11 @@ def main():
         if ans.lower() not in ['y', 'yes', '']:
             sys.exit(1)
 
+    if (args.ntds and not args.userntds):
+        ans = input(highlight('[!] Dumping the ntds can crash the DC on Windows Server 2019. Use the option --user <user> to dump a specific user safely [Y/n] ', 'red'))
+        if ans.lower() not in ['y', 'yes', '']:
+            sys.exit(1)
+
     try:
         asyncio.run(
             start_threadpool(protocol_object, args, db, targets, jitter)