Skip to content
This repository has been archived by the owner on Sep 2, 2022. It is now read-only.

Add collection for Remote Management Users #83

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

RiccardoAncarani
Copy link

I added support for collecting local membership of the group "Remote Management Users", which can be used to define users that can access a target machine using PowerShell remoting.

For example, I am pushing the group "Domain Users" in the local group "Remote Management Users", as it is possible to see in the screenshot below from my test domain:

image

and, as you can see, the user RANCARANI is able to Enter-PSSession in the domain controller:

image

The result within BloodHound is the following:

image

I added the edge CanPSRemote .

I will create the pull request for the Electron app as soon as I can.

add remote management users collection
@RiccardoAncarani
Copy link
Author

I just realised that I removed the SharpHound icon in this pull request, sorry for that! A very smart AV was picking the binary because of the icon

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant