Complexity: MediumFeatureHelp wantedImpact: Medium
仓库指标
- Star
- (6,250 star)
- PR 合并指标
- (30 天内没有已合并 PR)
描述
Expected Behavior
The Monkey should have a feature (with a toggle) to query the domain controller and get a list of domain joined machines to try and attack. Since the Monkey in this case would be running in a domain machine, the credentials stolen by mimikatz will likely be valid for other domain joined machines.
We could get the data using WMI queries we're already running or by running PowerShell commands