admin/PowerShellMafia-PowerSploit
1
0
Fork 0
mirror of https://github.com/PowerShellMafia/PowerSploit synced 2026-06-08 12:13:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix for Find-GPOComputerAdmin

Browse Source
This commit is contained in:
Harmj0y
2016-03-09 16:23:27 -05:00
parent 2e0197603c
commit 625705781e
1 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Recon/PowerView.ps1
+15 -3
View File
@@ -6191,7 +6191,6 @@ function Find-GPOLocation {
}
}
Write-Verbose "GPOgroups: $GPOgroups"
$ProcessedGUIDs = @{}
# process the matches and build the result objects
@@ -6424,10 +6423,23 @@ function Find-GPOComputerAdmin {
# for each found GPO group, resolve the SIDs of the members
$GPOgroups | Where-Object {$_} | Foreach-Object {
$GPO = $_
if ($GPO.members) {
$GPO.members = $GPO.members | Where-Object {$_} | ForEach-Object {
if($_ -match '^S-1-.*') {
$_
}
else {
# if there are any plain group names, try to resolve them to sids
(Convert-NameToSid -ObjectName $_ -Domain $Domain).SID
}
} | Sort-Object -Unique
}
$GPO.members | Foreach-Object {
# resolvethis SID to a domain object
$Object = Get-ADObject -Domain $Domain -DomainController $DomainController $_ -PageSize $PageSize
# resolve this SID to a domain object
$Object = Get-ADObject -Domain $Domain -DomainController $DomainController -PageSize $PageSize -SID $_
$GPOComputerAdmin = New-Object PSObject
$GPOComputerAdmin | Add-Member Noteproperty 'ComputerName' $ComputerName