{"id":13721892,"url":"https://github.com/NetSPI/goddi","last_synced_at":"2025-05-07T14:30:51.739Z","repository":{"id":53206320,"uuid":"129794449","full_name":"NetSPI/goddi","owner":"NetSPI","description":"goddi (go dump domain info) dumps Active Directory domain information","archived":true,"fork":false,"pushed_at":"2022-05-31T01:47:13.000Z","size":22,"stargazers_count":426,"open_issues_count":4,"forks_count":96,"subscribers_count":19,"default_branch":"master","last_synced_at":"2024-04-14T18:14:28.466Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/NetSPI.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-04-16T19:23:11.000Z","updated_at":"2024-04-11T03:32:18.000Z","dependencies_parsed_at":"2022-08-29T11:31:37.961Z","dependency_job_id":null,"html_url":"https://github.com/NetSPI/goddi","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NetSPI%2Fgoddi","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NetSPI%2Fgoddi/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NetSPI%2Fgoddi/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/NetSPI%2Fgoddi/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/NetSPI","download_url":"https://codeload.github.com/NetSPI/goddi/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":252895510,"owners_count":21821173,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T01:01:22.521Z","updated_at":"2025-05-07T14:30:51.448Z","avatar_url":"https://github.com/NetSPI.png","language":"Go","funding_links":[],"categories":["Network Scanners","Go"],"sub_categories":[],"readme":"# ARCHIVE NOTE\nProject is no longer actively maintained.\n\n# goddi - Go dump domain info\n\n[![licence badge]][licence]\n[![GitHub release](https://img.shields.io/github/release/NetSPI/goddi.svg?style=flat-square)](https://github.com/NetSPI/goddi/releases/latest)\n[![Go Report Card](https://goreportcard.com/badge/github.com/NetSPI/goddi?style=flat-square)](https://goreportcard.com/report/github.com/NetSPI/goddi)\n\n[licence badge]:https://img.shields.io/badge/license-New%20BSD-blue.svg?style=flat-square\n[licence]:https://github.com/NetSPI/goddi/blob/master/LICENSE\n\nBased on work from Scott Sutherland (@\\_nullbind), Antti Rantasaari, Eric Gruber (@egru), Will Schroeder (@harmj0y), and the \u003ca href=\"https://github.com/PowerShellMafia/PowerSploit/tree/master/Recon\"\u003ePowerView authors\u003c/a\u003e.\n\n## Install\n\nUse the executables in the releases section. If you want to build it yourself, make sure that your go environment is setup according to the \u003ca href=\"https://golang.org/doc/code.html\"\u003eGo setup doc\u003c/a\u003e. The goddi package also uses the below package.\n\n    go get gopkg.in/ldap.v2\n\n### Windows\n\nTested on Windows 10 and 8.1 (go1.10 windows/amd64).\n\n### Linux\n\nTested on Kali Linux (go1.10 linux/amd64).\n\n- umount, mount, and cifs-utils need to be installed for mapping a share for GetGPP\n```\napt-get update\napt-get install -y mount cifs-utils\n```\n- make sure nothing is mounted at /mnt/goddi/\n- make sure to run with `sudo`\n\n### Darwin\n\nTested on Darwin 17.5.0 (go1.10.1 darwin/amd64)\n\n- make sure nothing is mounted at /mnt/goddi/\n- make sure to run with `sudo`\n\n## Run\n\nWhen run, will default to using TLS (tls.Client method) over 636. On Linux, make sure to run with `sudo`.\n\n- username: Target user. Required parameter.\n- password: Target user's password. Required parameter.\n- domain: Full domain name. Required parameter.\n- dc: DC to target. Can be either an IP or full hostname. Required parameter.\n- startTLS: Use to StartTLS over 389.\n- unsafe: Use for a plaintext connection.\n\n```\nPS C:\\Users\\Administrator\\Desktop\u003e .\\godditest-windows-amd64.exe -username=testuser -password=\"testpass!\" -domain=\"test.local\" -dc=\"dc.test.local\" -unsafe\n[i] Begin PLAINTEXT LDAP connection to 'dc.test.local'...\n[i] PLAINTEXT LDAP connection to 'dc.test.local' successful...\n[i] Begin BIND...\n[i] BIND with 'testuser' successful...\n[i] Begin dump domain info...\n[i] Domain Trusts: 1 found\n[i] Domain Controllers: 1 found\n[i] Users: 12 found\n        [*] Warning: keyword 'pass' found!\n        [*] Warning: keyword 'fall' found!\n[i] Domain Admins: 4 users found\n[i] Enterprise Admins: 1 users found\n[i] Forest Admins: 0 users found\n[i] Locked Users: 0 found\n[i] Disabled Users: 2 found\n[i] Groups: 45 found\n[i] Domain Sites: 1 found\n[i] Domain Subnets: 0 found\n[i] Domain Computers: 17 found\n[i] Deligated Users: 0 found\n[i] Users with passwords not set to expire: 6 found\n[i] Machine Accounts with passwords older than 45 days: 18 found\n[i] Domain OUs: 8 found\n[i] Domain Account Policy found\n[i] Domain GPOs: 7 found\n[i] FSMO Roles: 3 found\n[i] SPNs: 122 found\n[i] LAPS passwords: 0 found\n[i] GPP enumeration starting. This can take a bit...\n[i] GPP passwords: 7 found\n[i] CSVs written to 'csv' directory in C:\\Users\\Administrator\\Desktop\n[i] Execution took 1.4217256s...\n[i] Exiting...\n```\n\n## Functionality\n\nStartTLS and TLS (tls.Client func) connections supported. Connections over TLS are default. All output goes to CSVs and are created in /csv/ in the current working directory. Dumps:\n\n- Domain users. Also searches Description for keywords and prints to a seperate csv ex. \"Password\" was found in the domain user description.\n- Users in priveleged user groups (DA, EA, FA).\n- Users with passwords not set to expire.\n- User accounts that have been locked or disabled.\n- Machine accounts with passwords older than 45 days.\n- Domain Computers.\n- Domain Controllers.\n- Sites and Subnets.\n- SPNs and includes csv flag if domain admin (a flag to note SPNs that are DAs in the SPN CSV output).\n- Trusted domain relationships.\n- Domain Groups.\n- Domain OUs.\n- Domain Account Policy.\n- Domain deligation users.\n- Domain GPOs.\n- Domain FSMO roles.\n- LAPS passwords.\n- GPP passwords. On Windows, defaults to mapping Q. If used, will try another mapping until success R, S, etc... On Linux, /mnt/goddi is used.\n\n## Roadmap\n\n- Add support for running from current user context on Windows. Automatically get current domain and run in current user context.\n- Add robust error handling for GetGPP (net use and mount)\n- Improve XML parsing for GetGPP\n\n## Known Issues\n\n- Execution can fail at GetGPP if there are errors mapping a share or mounting /mnt/goddi. If goddi fails during GetGPP do the following checks.\n    - Windows: check what shares are mounted with `net use`. If there is a share mounted to the target dc from goddi, remove it with `net use Q: /delete` where Q: is the problematic share.\n    - Linux: check if /mnt/goddi exists. If something is mounted, use `umount /mnt/goddi`. Make sure goddi is run with sudo.\n\n## References\n\n- Scott Sutherland (@\\_nullbind)\n- Antti Rantasaari\n- Eric Gruber (@egru)\n- Will Schroeder (@harmj0y)\n- Karl Fosaaen (@kfosaaen)\n- @\\_RastaMouse\n- Chris Campbell (@obscuresec)\n- Leon Teale (@LeonTeale)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FNetSPI%2Fgoddi","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FNetSPI%2Fgoddi","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FNetSPI%2Fgoddi/lists"}