LDAP Force Change Password

Resets a target user's password using LDAP unicodePwd requires LDAPS and ForceChangePassword / reset rights — NetExec: -M change-password. !/usr/bin/env python3 -- coding: utf-8 -- """Force-change a user password via LDAP ForceChangePassword ACL / NetExec change-password.""" from kittysploit impo...

LDAP Add Service Principal Name

Add or remove an SPN on a target account to enable Kerberoast or RBCD prep chains from kittysploit import from lib.protocols.ldap.ldappostclient import LdapPostClient class ModulePost, LdapPostClient: info = "name": "LDAP Add Service Principal Name", "description": "Add or remove an SPN on a targ...

AD Object ACL Operations

Runs common bloodyAD object/ACL operations: set owner, add GenericAll, move DN, set password, enable account. !/usr/bin/env python3 -- coding: utf-8 -- import os import shlex import shutil import subprocess from kittysploit import try: from ldap3 import ALL, Connection, Server LDAP3AVAILABLE = Tr...