{"id":23682467,"url":"https://github.com/ccob/drsat","last_synced_at":"2025-04-04T10:04:07.237Z","repository":{"id":256730468,"uuid":"852342306","full_name":"CCob/DRSAT","owner":"CCob","description":"Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domain joined machies","archived":false,"fork":false,"pushed_at":"2024-12-27T11:44:18.000Z","size":26,"stargazers_count":229,"open_issues_count":0,"forks_count":25,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-04-04T09:43:48.016Z","etag":null,"topics":["bypass","gpo","hook","inject","rsat"],"latest_commit_sha":null,"homepage":"","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/CCob.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"github":"CCob","patreon":null,"open_collective":null,"ko_fi":null,"tidelift":null,"community_bridge":null,"liberapay":null,"issuehunt":null,"lfx_crowdfunding":null,"polar":null,"buy_me_a_coffee":null,"thanks_dev":null,"custom":null}},"created_at":"2024-09-04T16:35:02.000Z","updated_at":"2025-03-18T09:03:48.000Z","dependencies_parsed_at":"2024-09-12T19:50:43.951Z","dependency_job_id":"d9ef4848-5ce3-4411-b17e-9d36d9c9d432","html_url":"https://github.com/CCob/DRSAT","commit_stats":null,"previous_names":["ccob/dgpoedit","ccob/drsat"],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CCob%2FDRSAT","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CCob%2FDRSAT/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CCob%2FDRSAT/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CCob%2FDRSAT/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/CCob","download_url":"https://codeload.github.com/CCob/DRSAT/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247157280,"owners_count":20893220,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bypass","gpo","hook","inject","rsat"],"created_at":"2024-12-29T19:22:24.581Z","updated_at":"2025-04-04T10:04:07.210Z","avatar_url":"https://github.com/CCob.png","language":"C#","funding_links":["https://github.com/sponsors/CCob"],"categories":[],"sub_categories":[],"readme":"# Disconnected RSAT \n\n## Introduction\n\nDisconnected RSAT is a launcher for the official Group Policy Manager, Certificate Authority and Certificate Templates snap-in to bypass the domain joined requirement that is needed when using the official MMC snap-in.  \n\nThe tool works by injecting a C# library into MMC that will hook the various API calls to trick MMC into believing that the logged on user is a domain user.  Hooks are also placed on the `NtCreateFile` API to redirect file paths that would typically be resolved via DFS to a specific domain controller.\n\n## Prerequisites  \n\nSince Disconnected RSAT relies on the official snap-ins, you'll first need to install the Windows Remote Server Administration Tools (RSAT) on the non domain joined host you'll be operating from.\n\n## Usage\n\nmmc.exe is marked for auto elevation, therefore launching of `DRSAT.exe` should be performed from an elevated command prompt that has either got a relevant TGT with correct permissions imported into the same luid session or alternatively the session has been created using `runas /netonly`.  This will ensure that the relevant Kerberos tickets will be fetched automatically or NTLM credentials are used for outbound network connections when `runas /netonly` has been used.  \n\n### Launching Group Policy Manager\n\nTo launch GPM to target a specific Active Directory domain, simply supply the DNS domain name of the target.\n\n```\nDRSAT gpo ad.target.com\n``` \n\n### Launching Certificate Authority\n\nWhilst the certificate authority snap-in works when disconnected from the domain, template resolution doesn't work correctly, this can be solved by launching via DRSAT\n\n```\nDRSAT cert ad.target.com\n```\n\n### Launching Certifictate Template edittor\n\nYou can also directly edit certificate templates by using the following command\n\n```\nDRSAT template ad.target.com\n```\n\n### Release\n\nPrecompiled binaries can be found on the [Releases](https://github.com/CCob/DRSAT/releases) page\n\n\n\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fccob%2Fdrsat","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fccob%2Fdrsat","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fccob%2Fdrsat/lists"}