Active Directory Manipulation

Hi Friends.

I did some excercise on the pentest in order to refresh my knowledge. During my exercise, I was progressing on certain attack on the active directory.

In this attack, I need to change the ownership of specific group to an account that I have compromissed which is called m.lovegod. Below is the bloodhound enumeration result.

I need to make m.lovegod to own on the network audit group.

You need to download and install the impacket from the github but make sure you download the dacledit brach in order to get the owneredit.py

git clone –branch dacledit https://github.com/ShutdownRepo/impacket.git

First, you need to authicate as m.lovegod by using the impacket-getTGT command.

Once the authentication finished then we can change the ownership of the network audit group with the owneredit.py

python3 ./owneredit.py -action write -target 'NETWORK AUDIT' -new-owner 'm.lovegod' 'absolute.htb'/'m.lovegod' -k -no-pass -dc-ip 10.10.11.181