+Region check on Find-DomainLocalGroupMember
If a user does not manually specify $GroupName it defaults to "Administrators" which may not be valid in specific regions. I added a check to pull out the Group Name from the Admin SID, see: https://github.com/PowerShellMafia/PowerSploit/issues/176
This commit is contained in:
parent
41cad0ee9f
commit
7a3e16ace5
|
|
@ -18911,6 +18911,12 @@ Custom PSObject with translated group property fields from WinNT results.
|
|||
$HostEnumBlock = {
|
||||
Param($ComputerName, $GroupName, $Method, $TokenHandle)
|
||||
|
||||
# Add check if user defaults to/selects "Administrators"
|
||||
if ($GroupName -eq "Administrators") {
|
||||
$AdminSecurityIdentifier = New-Object System.Security.Principal.SecurityIdentifier([System.Security.Principal.WellKnownSidType]::BuiltinAdministratorsSid,$null)
|
||||
$GroupName = ($SecurityIdentifier.Translate([System.Security.Principal.NTAccount]).Value -split "\\")[-1]
|
||||
}
|
||||
|
||||
if ($TokenHandle) {
|
||||
# impersonate the the token produced by LogonUser()/Invoke-UserImpersonation
|
||||
$Null = Invoke-UserImpersonation -TokenHandle $TokenHandle -Quiet
|
||||
|
|
|
|||
Loading…
Reference in New Issue