admin/e-fin-ADWS-BOF
1
0
Fork 0
mirror of https://github.com/e-fin/ADWS-BOF synced 2026-06-23 09:33:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

automatic resolution of DC IP

Browse Source
This commit is contained in:
Your Name
2026-06-12 12:31:54 -04:00
parent 8fd60b9e75
commit 8a20017e2b
2 changed files with 25 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ADWS-BOF/adwsldap.cpp
+23 -2
View File
@@ -1,6 +1,6 @@
#include <Windows.h>
#include "base\helpers.h"
#include <dsgetdc.h>
#ifdef _DEBUG
#undef DECLSPEC_IMPORT
#define DECLSPEC_IMPORT
@@ -149,6 +149,7 @@ extern "C" {
void* ai_next;
} addrinfo;
typedef DWORD(__stdcall* PFN_DsGetDcNameA)(LPCSTR, LPCSTR, GUID*, LPCSTR, ULONG, PDOMAIN_CONTROLLER_INFOA*);
typedef i32(__stdcall* PFN_WSAStartup)(u16, void*);
typedef void(__stdcall* PFN_WSACleanup)(void);
typedef SOCKET(__stdcall* PFN_socket)(i32, i32, i32);
@@ -419,6 +420,8 @@ extern "C" {
static PFN_FreeCredHandle pfn_FreeCredHandle;
static PFN_DeleteSecCtx pfn_DeleteSecCtx;
static PFN_DsGetDcNameA pfn_DsGetDcNameA;
/* ─── TCP socket ---───────────────────────── */
#define SOL_SOCKET 0xFFFF
@@ -3053,7 +3056,7 @@ extern "C" {
return TRUE;
}
/* ─── GUID / SID parsing (matching BridgeHead reference) ─────────────────── */
@@ -3133,6 +3136,24 @@ extern "C" {
const char** attrs = (attr_count > 0) ? (const char**)attr_ptrs : NULL;
if (adws_strcmp(ip, "NULL") == 0) {
PDOMAIN_CONTROLLER_INFOA pDCI;
pfn_DsGetDcNameA = (PFN_DsGetDcNameA)KERNEL32$GetProcAddress(KERNEL32$LoadLibraryA("Netapi32.dll"), "DsGetDcNameA");
DWORD ret = pfn_DsGetDcNameA(NULL, NULL, NULL, NULL, DS_RETURN_DNS_NAME, &pDCI);
if (ret == ERROR_SUCCESS) {
//printf("DC: %s\n", pDCI->DomainControllerName);
ip = pDCI->DomainControllerAddress+2;
//printf("Address: %s\n", addr);
//printf("Address: %s\n", addr + 2);
//while (*addr == '\\') addr++;
//printf("Address: %s\n", addr);
//NetApiBufferFree(pDCI);
}
else {
BeaconPrintf(CALLBACK_OUTPUT, "Cant Find DC IP Address, Specify with --ip");
return;
}
}
AdwsClient* c = adws_connect(ip, ip, domain, user, pass, "Enumeration", 120000);
if (!c) { return; }
adws.cna
+2 -2
View File
@@ -40,7 +40,7 @@ alias adwsldapsearch {
return;
}
$ip = "";
$ip = "NULL";
$domain = "";
$username = "NULL";
$password = "NULL";
@@ -85,7 +85,7 @@ alias adwsldapsearch {
}
}
if ($ip eq "") { berror($1, "Missing --ip"); return; }
#if ($ip eq "") { berror($1, "Missing --ip"); return; }
if ($domain eq "") { berror($1, "Missing --domain"); return; }
if ($query eq "") { berror($1, "Missing --query"); return; }
if ($dn eq "") { berror($1, "Missing --dn"); return; }