Complexity: MediumFeatureHelp wantedImpact: Medium
倉庫指標
- Star
- (6,250 star)
- PR 合併指標
- (30 天內沒有已合併 PR)
描述
Expected Behavior
The Monkey should have a feature (with a toggle) to query the domain controller and get a list of domain joined machines to try and attack. Since the Monkey in this case would be running in a domain machine, the credentials stolen by mimikatz will likely be valid for other domain joined machines.
We could get the data using WMI queries we're already running or by running PowerShell commands