Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/RiccardoAncarani/DirSync-Poc

A PoC that uses the DirSync protocol to poll Active Directory for changes
https://github.com/RiccardoAncarani/DirSync-Poc

Last synced: 21 days ago
JSON representation

A PoC that uses the DirSync protocol to poll Active Directory for changes

Host: GitHub
URL: https://github.com/RiccardoAncarani/DirSync-Poc
Owner: RiccardoAncarani
Created: 2020-08-16T17:14:59.000Z (over 4 years ago)
Default Branch: master
Last Pushed: 2020-08-16T17:34:27.000Z (over 4 years ago)
Last Synced: 2024-08-05T17:24:16.616Z (4 months ago)
Language: C#
Size: 104 KB
Stars: 13
Watchers: 2
Forks: 2
Open Issues: 0
Metadata Files:
- Readme: README.md

Awesome Lists containing this project

awesome-hacking-lists - RiccardoAncarani/DirSync-Poc - A PoC that uses the DirSync protocol to poll Active Directory for changes (C# #)

README

# DirSync PoC

An extremely unsexy PoC of a software that uses the DirSync protocol to poll Active Directory for changes.

So it turns out that there are multiple ways of polling Active Directory for changes, this repository is meant to explore the method called "DirSync".

Example of output after granting someone privileges to add Group Policies:

![image-20200816192857445](assets/image-20200816192857445.png)

This you might have noticed:

- You don't see the exact attribute that was modified
- You don't see who performed that action
- ACL parsing logic was completely stolen from SharpHound. Life is too short.

So how can you use this?

- Detecting persistence

- General AD hygene