guardicore / guardicore/monkey
In domain networks, query domain to scan machines in domain
Open
Complexity: Medium
Feature
Help wanted
Impact: Medium
- Dominant language
- Python
- Stars
- 7.1k
- Forks
- 830
- PR merge metrics
- No merged PRs in 30d
Description
## Expected Behavior
The Monkey should have a feature (with a toggle) to query the domain controller and get a list of domain joined machines to try and attack.
Since the Monkey in this case would be running in a domain machine, the credentials stolen by mimikatz will likely be valid for other domain joined machines.
We could get the data using WMI queries we're already running or by running PowerShell commands
Contributor guide
Assessment
This issue has not been assessed yet.