8fb4ak1w

1<#
2
3.SYNOPSIS
4    ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
5
6.DESCRIPTION
7
8    ADRecon is a tool which extracts various artifacts (as highlighted below) out of an AD environment in a specially formatted Microsoft Excel report that includes summary views with metrics to facilitate analysis.
9    The report can provide a holistic picture of the current state of the target AD environment.
10    The tool is useful to various classes of security professionals like auditors, DIFR, students, administrators, etc. It can also be an invaluable post-exploitation tools for a penetration tester.
11    It can be ran from any workstation that is connected to the environment even hosts that are not domain members. Furthermore, the tool can be executed in the context of a non-privileged (i.e. standard domain user) accounts. Fine Grained Password Policy, LAPS and BitLocker may require Privileged user accounts.
12    The tool will use Microsoft Remote Server Administration Tools (RSAT) if available, otherwise it will communicate with the Domain Controller using LDAP.
13    The following information is gathered by the tool:
14    - Forest;
15    - Domains in the Forest and other attributes such as Sites;
16    - Domain Password Policy;
17    - Domain Controllers and their roles;
18    - Users and their attributes;
19    - Service Principal Names;
20    - Groups and and their members;
21    - Organizational Units and their ACLs;
22    - Group Policy Object details;
23    - DNS Zones;
24    - Printers;
25    - Computers and their attributes;
26    - LAPS passwords (if implemented); and
27    - BitLocker Recovery Keys (if implemented).
28
29    Author     : Prashant Mahajan
30    Company    : https://www.senseofsecurity.com.au
31
32.NOTES
33
34    The following commands can be used to turn off ExecutionPolicy: (Requires Admin Privs)
35
36    PS > $ExecPolicy = Get-ExecutionPolicy
37    PS > Set-ExecutionPolicy bypass
38    PS > .\ADRecon.ps1
39    PS > Set-ExecutionPolicy $ExecPolicy
40
41    OR
42
43    Start the PowerShell as follows:
44    powershell.exe -ep bypass
45
46    OR
47
48    Already have a PowerShell open ?
49    PS > $Env:PSExecutionPolicyPreference = 'Bypass'
50
51    OR
52
53    powershell.exe -nologo -executionpolicy bypass -noprofile -file ADRecon.ps1
54
55.PARAMETER Protocol
56	Which protocol to use; ADWS (default) or LDAP
57
58.PARAMETER DomainController
59	Domain Controller IP Address or Domain FQDN.
60
61.PARAMETER Credential
62	Domain Credentials.
63
64.PARAMETER GenExcel
65	Path for ADRecon output folder containing the CSV files to generate the ADRecon-Report.xlsx. Use it to generate the ADRecon-Report.xlsx when Microsoft Excel is not installed on the host used to run ADRecon.
66
67.PARAMETER Collect
68    What attributes to collect (Comma separated; e.g Forest,Domain)
69    Valid values include: Forest, Domain, PasswordPolicy, DCs, Users, UserSPNs, Groups, GroupMembers, OUs, OUPermissions, GPOs, DNSZones, Printers, Computers, ComputerSPNs, LAPS, BitLocker.
70
71.PARAMETER DormantTimeSpan
72    Timespan for Dormant accounts. (Default 90 days)
73
74.PARAMETER PageSize
75    The PageSize to set for the LDAP searcher object.
76
77.PARAMETER Threads
78    The number of threads to use during processing objects. (Default 10)
79
80.PARAMETER FlushCount
81    The number of processed objects which will be flushed to disk. (Default -1 - Flush after all objects are processed).
82
83.EXAMPLE
84
85	.\ADRecon.ps1 -GenExcel C:\ADRecon-Report-<timestamp>
86    [*] ADRecon <version> by Prashant Mahajan (@prashant3535) from Sense of Security.
87    [*] Generating ADRecon-Report.xlsx
88    [+] Excelsheet Saved to: C:\ADRecon-Report-<timestamp>\<domain>-ADRecon-Report.xlsx
89
90.EXAMPLE
91
92	.\ADRecon.ps1 -DomainController <IP or FQDN> -Credential <domain\username>
93    [*] ADRecon <version> by Prashant Mahajan (@prashant3535) from Sense of Security.
94	Member Workstation
95    <Domain>
96    <snip>
97
98    Example output from Domain Member with Alternate Credentials.
99
100.EXAMPLE
101
102	.\ADRecon.ps1 -DomainController <IP or FQDN> -Credential <domain\username> -Collect DCs
103    [*] ADRecon <version> by Prashant Mahajan (@prashant3535) from Sense of Security.
104    Standalone Workstation
105    WORKGROUP
106    [*] Commencing - <timestamp>
107    [-] Domain Controllers
108    [*] Total Execution Time (mins): <minutes>
109    [*] Generating ADRecon-Report.xlsx
110    [+] Excelsheet Saved to: C:\ADRecon-Report-<timestamp>\<domain>-ADRecon-Report.xlsx
111    [*] Completed.
112    [*] Output Directory: C:\ADRecon-Report-<timestamp>
113
114    Example output from from a Non-Member using RSAT to only enumerate Domain Controllers.
115
116.EXAMPLE
117
118    .\ADRecon.ps1 -Protocol ADWS -DomainController <IP or FQDN> -Credential <domain\username>
119    [*] ADRecon <version> by Prashant Mahajan (@prashant3535) from Sense of Security.
120    Standalone Workstation
121    WORKGROUP
122    [*] Commencing - <timestamp>
123    [-] Domain
124    [-] Forest
125    [-] Default Password Policy
126    [-] Fine Grained Password Policy - May need a Privileged Account
127    [-] Domain Controllers
128    [-] Domain Users - May take some time
129    [*] Total Users: <number>
130    [-] Domain User SPNs
131    [-] Domain Groups - May take some time
132    [*] Total Groups: <number>
133    [-] Domain Group Memberships - May take some time
134    [*] Total GroupMember Objects: <number>
135    [-] Domain OrganizationalUnits
136    [*] Total OUs: <number>
137    [-] Domain OrganizationalUnits Permissions - May take some time
138    [-] Domain GPOs
139    [*] Total GPOs: <number>
140    [-] Domain DNS Zones
141    [*] Total DNS Zones: <number>
142    [-] Domain Printers
143    [*] Total Printers: <number>
144    [-] Domain Computers - May take some time
145    [*] Total Computers: <number>
146    [-] Domain Computer SPNs
147    [-] LAPS - Needs Privileged Account
148    [*] LAPS is not implemented.
149    [-] BitLocker Recovery Keys - Needs Privileged Account
150    [*] Total Execution Time (mins): <minutes>
151    [*] Generating ADRecon-Report.xlsx
152    [+] Excelsheet Saved to: C:\ADRecon-Report-<timestamp>\<domain>-ADRecon-Report.xlsx
153    [*] Completed.
154    [*] Output Directory: C:\ADRecon-Report-<timestamp>
155
156    Example output from a Non-Member using RSAT.
157
158.EXAMPLE
159
160    .\ADRecon.ps1 -Protocol LDAP -DomainController <IP or FQDN> -Credential <domain\username>
161    [*] ADRecon <version> by Prashant Mahajan (@prashant3535) from Sense of Security.
162    Standalone Workstation
163    WORKGROUP
164    [*] LDAP bind Successful
165    [*] Commencing - <timstamp>
166    [-] Domain
167    [-] Forest
168    [-] Default Password Policy
169    [-] Fine Grained Password Policy - May need a Privileged Account
170    [-] Domain Controllers
171    [-] Domain Users - May take some time
172    [*] Calculating if the user Cannot Change Password
173    [*] Total Users: <number>
174    [-] Domain User SPNs
175    [-] Domain Groups - May take some time
176    [*] Total Groups: <number>
177    [-] Domain Group Memberships - May take some time
178    [*] Total GroupMember Objects: <number>
179    [-] Domain OrganizationalUnits
180    [*] Total OUs: <number>
181    [-] Domain OrganizationalUnits Permissions - May take some time
182    [-] Domain GPOs
183    [*] Total GPOs: <number>
184    [-] Domain DNS Zones
185    [*] Total DNS Zones: <number>
186    [-] Domain Printers
187    [*] Total Printers: <number>
188    [-] Domain Computers - May take some time
189    [*] Total Computers: <number>
190    [-] Domain Computer SPNs
191    [-] LAPS - Needs Privileged Account
192    [*] LAPS is not implemented.
193    [-] BitLocker Recovery Keys - Needs Privileged Account
194    [*] Total Execution Time (mins): <timestamp>
195    [*] Generating ADRecon-Report.xlsx
196    [+] Excelsheet Saved to: C:\ADRecon-Report-<timestamp>\<domain>-ADRecon-Report.xlsx
197    [*] Completed.
198    [*] Output Directory: C:\ADRecon-Report-<timestamp>
199
200    Example output from a Non-Member using LDAP.
201
202.LINK
203https://github.com/sense-of-security/ADRecon
204#>
205
206[CmdletBinding()]
207param
208(
209    [Parameter(Mandatory = $false, HelpMessage = "Which protocol to use; ADWS (default) or LDAP.")]
210    [string] $Protocol = 'ADWS',
211
212    [Parameter(Mandatory = $false, HelpMessage = "Domain Controller IP Address or Domain FQDN.")]
213    [string] $DomainController,
214
215    [Parameter(Mandatory = $false, HelpMessage = "Domain Credentials.")]
216    [Management.Automation.PSCredential] $Credential = [Management.Automation.PSCredential]::Empty,
217
218    [Parameter(Mandatory = $false, HelpMessage = "Path for ADRecon output folder containing the CSV files to generate the ADRecon-Report.xlsx. Use it to generate the ADRecon-Report.xlsx when Microsoft Excel is not installed on the host used to run ADRecon.")]
219    [string] $GenExcel,
220
221    [Parameter(Mandatory = $false, HelpMessage = "What attributes to collect; Forest, Domain, PasswordPolicy, DCs, Users, UserSPNs, Groups, GroupMembers, OUs, OUPermissions, GPOs, DNSZones, Printers, Computers, ComputerSPNs, LAPS, BitLocker")]
222    [ValidateSet('Forest', 'Domain', 'PasswordPolicy', 'DCs', 'Users', 'UserSPNs', 'Groups', 'GroupMembers', 'OUs', 'OUPermissions', 'GPOs', 'DNSZones', 'Printers', 'Computers', 'ComputerSPNs', 'LAPS', 'BitLocker', 'Default')]
223    [array] $Collect = 'Default',
224
225    [Parameter(Mandatory = $false, HelpMessage = "Timespan for Dormant accounts. Default 90 days")]
226    [ValidateRange(1,1000)]
227    [int] $DormantTimeSpan = 90,
228
229    [Parameter(Mandatory = $false, HelpMessage = "The PageSize to set for the LDAP searcher object. Default 200")]
230    [ValidateRange(1,10000)]
231    [int] $PageSize = 200,
232
233    [Parameter(Mandatory = $false, HelpMessage = "The number of threads to use during processing of objects. Default 10")]
234    [ValidateRange(1,100)]
235    [int] $Threads = 10,
236
237    [Parameter(Mandatory = $false, HelpMessage = "The number of processed objects which will be flushed to disk. Default -1 (After all objects are processed).")]
238    [ValidateRange(-1,1000000)]
239    [int] $FlushCount = -1
240
241)
242
243$ADWSSource = @"
244// Thanks Dennis Albuquerque for the C# multithreading code
245using System;
246using System.Collections.Generic;
247using System.IO;
248using System.Threading;
249using System.Text.RegularExpressions;
250using System.Security.Principal;
251using System.Management.Automation;
252
253namespace ADRecon
254{
255    public static class ADWSClass
256    {
257        private static DateTime Date1;
258        private static int PassMaxAge;
259        private static int DormantTimeSpan;
260        private static string FilePath;
261        private static readonly HashSet<string> Groups = new HashSet<string> ( new String[] {"268435456", "268435457", "536870912", "536870913"} );
262        private static readonly HashSet<string> Users = new HashSet<string> ( new String[] { "805306368" } );
263        private static readonly HashSet<string> Computers = new HashSet<string> ( new String[] { "805306369" }) ;
264        private static readonly HashSet<string> TrustAccounts = new HashSet<string> ( new String[] { "805306370" } );
265
266		private static readonly Dictionary<String, String> Replacements = new Dictionary<String, String>()
267        {
268            //{System.Environment.NewLine, ""},
269            //{",", ";"},
270            {"\"", "'"}
271        };
272
273        public static void UserParser(Object[] AdUsers, DateTime Date1, int PassMaxAge, string FilePath, int DormantTimeSpan, int numOfThreads, int flushCnt)
274        {
275            ADWSClass.Date1 = Date1;
276            ADWSClass.PassMaxAge = PassMaxAge;
277            ADWSClass.DormantTimeSpan = DormantTimeSpan;
278            ADWSClass.FilePath = FilePath;
279
280            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
281            {
282                string HeaderRow = String.Format("Name,UserName,Enabled,Cannot Change Password,Password Never Expires,Must Change Password at Logon,Days Since Last Password Change,Password Not Changed after Max Age,Account Locked Out,Never Logged in,Days Since Last Logon,Dormant (> {0} days),Reversibly Encryped Password,Password Not Required,Trusted for Delegation,Trusted to Auth for Delegation,Does Not Require Pre Auth,Logon Workstations,AdminCount,Primary GroupID,SID,SIDHistory,Description,Password LastSet,Last Logon Date,When Created,When Changed,DistinguishedName,CanonicalName",DormantTimeSpan);
283                file.WriteLine(HeaderRow);
284            }
285            Console.WriteLine("[*] Total Users: " + AdUsers.Length);
286            runProcessor(AdUsers, numOfThreads, flushCnt, "Users", "CSV");
287        }
288
289        public static int UserSPNParser(Object[] AdUsers, string FilePath, int numOfThreads, int flushCnt)
290        {
291            if (AdUsers.Length == 1)
292            {
293                return AdUsers.Length;
294            }
295
296            ADWSClass.FilePath = FilePath;
297
298            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
299            {
300                string HeaderRow = "Name,Username,Service,Host,Password Last Set,Description";
301                file.WriteLine(HeaderRow);
302            }
303            runProcessor(AdUsers, numOfThreads, flushCnt, "UserSPNs", "CSV");
304            return AdUsers.Length;
305        }
306
307        public static void GroupParser(Object[] AdGroups, string FilePath, int numOfThreads, int flushCnt)
308        {
309            ADWSClass.FilePath = FilePath;
310
311            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
312            {
313                string HeaderRow = "Group,ManagedBy,whenCreated,whenChanged,Description,SID,DistinguishedName,CanonicalName";
314                file.WriteLine(HeaderRow);
315            }
316            Console.WriteLine("[*] Total Groups: " + AdGroups.Length);
317            runProcessor(AdGroups, numOfThreads, flushCnt, "Groups", "CSV");
318        }
319
320        public static void GroupMemberParser(Object[] AdGroupMembers, string FilePath, int numOfThreads, int flushCnt)
321        {
322            ADWSClass.FilePath = FilePath;
323
324            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
325            {
326                string HeaderRow = "Group Name, Member UserName, Member Name, AccountType";
327                file.WriteLine(HeaderRow);
328            }
329            Console.WriteLine("[*] Total GroupMember Objects: " + AdGroupMembers.Length);
330            runProcessor(AdGroupMembers, numOfThreads, flushCnt, "GroupMembers", "CSV");
331        }
332
333        public static int ComputerParser(Object[] AdComputers, DateTime Date1, string FilePath, int numOfThreads, int flushCnt)
334        {
335            Console.WriteLine("[*] Total Computers: " + AdComputers.Length);
336            if (AdComputers.Length == 1)
337            {
338                return AdComputers.Length;
339            }
340
341            ADWSClass.Date1 = Date1;
342            ADWSClass.FilePath = FilePath;
343
344            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
345            {
346                string HeaderRow = "Name,DNSHostName,Enabled,IPv4Address,OperatingSystem,Days Since Last Logon,Days Since Last Password Change,Trusted for Delegation,Trusted to Auth for Delegation,Username,Primary Group ID,Description,Password LastSet,Last Logon Date,whenCreated,whenChanged,Distinguished Name";
347                file.WriteLine(HeaderRow);
348            }
349            runProcessor(AdComputers, numOfThreads, flushCnt, "Computers", "CSV");
350            return AdComputers.Length;
351        }
352
353        public static int ComputerSPNParser(Object[] AdComputers, string FilePath, int numOfThreads, int flushCnt)
354        {
355            if (AdComputers.Length == 1)
356            {
357                return AdComputers.Length;
358            }
359
360            ADWSClass.FilePath = FilePath;
361
362            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
363            {
364                string HeaderRow = "Name,Service,Host";
365                file.WriteLine(HeaderRow);
366            }
367            runProcessor(AdComputers, numOfThreads, flushCnt, "ComputerSPNs", "CSV");
368            return AdComputers.Length;
369        }
370
371        static void runProcessor(Object[] arrayToProcess, int numOfThreads, int flushCnt, string processorType, String resultHandlerType)
372        {
373            int totalRecords = arrayToProcess.Length;
374            //Console.WriteLine(String.Format("Running {0} records over {1} threads, flushing every {2} records",
375            //    totalRecords, numOfThreads, (flushCnt < 0 ? "NEVER" : flushCnt.ToString())));
376            IRecordProcessor recordProcessor = recordProcessorFactory(processorType);
377            IResultsHandler resultsHandler = resultHandlerFactory(resultHandlerType, flushCnt);
378            int numberOfRecordsPerThread = totalRecords / numOfThreads;
379            int remainders = totalRecords % numOfThreads;
380
381            Thread[] threads = new Thread[numOfThreads];
382            for (int i = 0; i < numOfThreads; i++)
383            {
384                int numberOfRecordsToProcess = numberOfRecordsPerThread;
385                if (i == (numOfThreads - 1))
386                {
387                    //last thread, do the remaining records
388                    numberOfRecordsToProcess += remainders;
389                }
390
391                //split the full array into chunks to be given to different threads
392                Object[] sliceToProcess = new Object[numberOfRecordsToProcess];
393                Array.Copy(arrayToProcess, i * numberOfRecordsPerThread, sliceToProcess, 0, numberOfRecordsToProcess);
394                ProcessorThread processorThread = new ProcessorThread(i, recordProcessor, resultsHandler, sliceToProcess);
395                threads[i] = new Thread(processorThread.processThreadRecords);
396                threads[i].Start();
397            }
398            foreach (Thread t in threads)
399            {
400                t.Join();
401            }
402
403            resultsHandler.finalise();
404        }
405
406        static IRecordProcessor recordProcessorFactory(String name)
407        {
408            switch (name)
409            {
410                case "Users":
411                    return new UserRecordProcessor();
412                case "UserSPNs":
413                    return new UserSPNRecordProcessor();
414                case "Groups":
415                    return new GroupRecordProcessor();
416                case "GroupMembers":
417                    return new GroupMemberRecordProcessor();
418                case "Computers":
419                    return new ComputerRecordProcessor();
420                case "ComputerSPNs":
421                    return new ComputerSPNRecordProcessor();
422            }
423            throw new ArgumentException("Invalid processor type " + name);
424        }
425
426        static IResultsHandler resultHandlerFactory(String name, int flushCnt)
427        {
428            switch (name)
429            {
430                case "CSV":
431                    return new CsvResultsHandler(flushCnt);
432                case "TXT":
433                    return new TxtResultsHandler(flushCnt);
434            }
435            throw new ArgumentException("Invalid processor type " + name);
436        }
437
438        class ProcessorThread
439        {
440            readonly int id;
441            readonly IRecordProcessor recordProcessor;
442            readonly IResultsHandler resultsHandler;
443            readonly Object[] objectsToBeProcessed;
444
445            public ProcessorThread(int id, IRecordProcessor recordProcessor, IResultsHandler resultsHandler, Object[] objectsToBeProcessed)
446            {
447                this.recordProcessor = recordProcessor;
448                this.id = id;
449                this.resultsHandler = resultsHandler;
450                this.objectsToBeProcessed = objectsToBeProcessed;
451            }
452
453            public void processThreadRecords()
454            {
455                for (int i = 0; i < objectsToBeProcessed.Length; i++)
456                {
457                    Object[] result = recordProcessor.processRecord(objectsToBeProcessed[i]);
458                    resultsHandler.processResults(result); //this is a thread safe operation
459                }
460            }
461        }
462
463        //The interface and implmentation class used to process a record (this implemmentation just returns a log type string)
464
465        interface IRecordProcessor
466        {
467            Object[] processRecord(Object record);
468        }
469
470        class UserRecordProcessor : IRecordProcessor
471        {
472            public Object[] processRecord(Object record)
473            {
474                try
475                {
476                    PSObject AdUser = (PSObject) record;
477                    bool? Enabled = null;
478                    bool MustChangePasswordatLogon = false;
479                    int DaysSinceLastPasswordChange = -1;
480                    bool PasswordNotChangedafterMaxAge = false;
481                    bool NeverLoggedIn = false;
482                    int DaysSinceLastLogon = -1;
483                    bool Dormant = false;
484                    String SIDHistory = "";
485                    DateTime PasswordLastSet = Convert.ToDateTime(AdUser.Members["PasswordLastSet"].Value);
486                    try
487                    {
488                        // The Enabled field can be blank which raises an exception. This may occur when the user is not allowed to query the UserAccountControl attribute.
489                        Enabled = (bool) AdUser.Members["Enabled"].Value;
490                    }
491                    catch //(Exception e)
492                    {
493                        //    Console.WriteLine("{0} Exception caught.", e);
494                    }
495                    if (Convert.ToString(AdUser.Members["pwdlastset"].Value) == "0")
496                    {
497                        MustChangePasswordatLogon = true;
498                    }
499                    else
500                    {
501                        DaysSinceLastPasswordChange = Math.Abs((Date1 - PasswordLastSet).Days);
502                        if (DaysSinceLastPasswordChange > PassMaxAge)
503                        {
504                            PasswordNotChangedafterMaxAge = true;
505                        }
506                    }
507                    DateTime LastLogonDate = Convert.ToDateTime(AdUser.Members["LastLogonDate"].Value);
508                    if (AdUser.Members["LastLogonDate"].Value != null)
509                    {
510                        DaysSinceLastLogon = Math.Abs((Date1 - LastLogonDate).Days);
511                        if (DaysSinceLastLogon > DormantTimeSpan)
512                        {
513                            Dormant = true;
514                        }
515                    }
516                    else
517                    {
518                        NeverLoggedIn = true;
519                    }
520                    Microsoft.ActiveDirectory.Management.ADPropertyValueCollection history = (Microsoft.ActiveDirectory.Management.ADPropertyValueCollection) AdUser.Members["SIDHistory"].Value;
521                    if (history.Value is System.Security.Principal.SecurityIdentifier[])
522                    {
523                        string sids = "";
524                        foreach (var value in (SecurityIdentifier[]) history.Value)
525                        {
526                            sids = sids + "," + Convert.ToString(value);
527                        }
528                        SIDHistory = sids.TrimStart(',');
529                    }
530                    else
531                    {
532                        SIDHistory = history != null ? Convert.ToString(history.Value) : "";
533                    }
534                    return new Object[] { AdUser.Members["Name"].Value, AdUser.Members["SamAccountName"].Value, Enabled, AdUser.Members["CannotChangePassword"].Value, AdUser.Members["PasswordNeverExpires"].Value, MustChangePasswordatLogon, DaysSinceLastPasswordChange, PasswordNotChangedafterMaxAge, AdUser.Members["LockedOut"].Value, NeverLoggedIn, DaysSinceLastLogon, Dormant, AdUser.Members["AllowReversiblePasswordEncryption"].Value, AdUser.Members["PasswordNotRequired"].Value, AdUser.Members["TrustedForDelegation"].Value, AdUser.Members["TrustedToAuthForDelegation"].Value, AdUser.Members["DoesNotRequirePreAuth"].Value, AdUser.Members["LogonWorkstations"].Value, AdUser.Members["AdminCount"].Value, AdUser.Members["primaryGroupID"].Value, AdUser.Members["SID"].Value, SIDHistory, AdUser.Members["Description"].Value, PasswordLastSet, LastLogonDate, AdUser.Members["whenCreated"].Value, AdUser.Members["whenChanged"].Value, AdUser.Members["DistinguishedName"].Value, AdUser.Members["CanonicalName"].Value };
535                }
536                catch (Exception e)
537                {
538                    Console.WriteLine("{0} Exception caught.", e);
539                    return new Object[] { };
540                }
541            }
542        }
543
544        class UserSPNRecordProcessor : IRecordProcessor
545        {
546            public Object[] processRecord(Object record)
547            {
548                try
549                {
550                    PSObject AdUser = (PSObject) record;
551                    List<Object> SPNList = new List<Object>();
552                    DateTime PasswordLastSet = DateTime.FromFileTime((long)AdUser.Members["pwdLastSet"].Value);
553                    Microsoft.ActiveDirectory.Management.ADPropertyValueCollection SPNs = (Microsoft.ActiveDirectory.Management.ADPropertyValueCollection)AdUser.Members["servicePrincipalName"].Value;
554                    if (SPNs.Value is System.String[])
555                    {
556                        foreach (String SPN in (System.String[])SPNs.Value)
557                        {
558                            String[] SPNArray = SPN.Split('/');
559                            SPNList.Add(new Object[] { AdUser.Members["Name"].Value, AdUser.Members["SamAccountName"].Value, SPNArray[0], SPNArray[1], PasswordLastSet, AdUser.Members["Description"].Value });
560                        }
561                    }
562                    else
563                    {
564                        String[] SPNArray = Convert.ToString(SPNs.Value).Split('/');
565                        SPNList.Add(new Object[] { AdUser.Members["Name"].Value, AdUser.Members["SamAccountName"].Value, SPNArray[0], SPNArray[1], PasswordLastSet, AdUser.Members["Description"].Value });
566                    }
567                    return SPNList.ToArray();
568                }
569                catch (Exception e)
570                {
571                    Console.WriteLine("{0} Exception caught.", e);
572                    return new Object[] { };
573                }
574            }
575        }
576
577        class GroupRecordProcessor : IRecordProcessor
578        {
579            public Object[] processRecord(Object record)
580            {
581                try
582                {
583                    PSObject AdGroup = (PSObject) record;
584                    string ManagedByValue = Convert.ToString(AdGroup.Members["managedBy"].Value);
585                    string ManagedBy = "";
586                    if (AdGroup.Members["managedBy"].Value != null)
587                    {
588                        ManagedBy = (ManagedByValue.Split(',')[0]).Split('=')[1];
589                    }
590                    return new Object[] { AdGroup.Members["SamAccountName"].Value, ManagedBy, AdGroup.Members["whenCreated"].Value, AdGroup.Members["whenChanged"].Value, AdGroup.Members["Description"].Value, AdGroup.Members["sid"].Value, AdGroup.Members["DistinguishedName"].Value, AdGroup.Members["CanonicalName"].Value };
591                }
592                catch (Exception e)
593                {
594                    Console.WriteLine("{0} Exception caught.", e);
595                    return new Object[] { };
596                }
597            }
598        }
599
600        class GroupMemberRecordProcessor : IRecordProcessor
601        {
602            public Object[] processRecord(Object record)
603            {
604                try
605                {
606                    // based on https://github.com/BloodHoundAD/BloodHound/blob/master/PowerShell/BloodHound.ps1
607                    PSObject AdGroup = (PSObject) record;
608                    List<Object> GroupsList = new List<Object>();
609                    string SamAccountType = Convert.ToString(AdGroup.Members["samaccounttype"].Value);
610                    string AccountType = "";
611                    string GroupName = "";
612                    string MemberUserName = "-";
613                    string MemberName = "";
614                    if (Groups.Contains(SamAccountType))
615                    {
616                        AccountType = "group";
617                        MemberName = ((Convert.ToString(AdGroup.Members["DistinguishedName"].Value)).Split(',')[0]).Split('=')[1];
618                        Microsoft.ActiveDirectory.Management.ADPropertyValueCollection MemberGroups = (Microsoft.ActiveDirectory.Management.ADPropertyValueCollection)AdGroup.Members["memberof"].Value;
619                        if (AdGroup.Members["memberof"].Value != null)
620                        {
621                            if (MemberGroups.Value is System.String[])
622                            {
623                                foreach (String GroupMember in (System.String[])MemberGroups.Value)
624                                {
625                                    GroupName = ((Convert.ToString(GroupMember)).Split(',')[0]).Split('=')[1];
626                                    GroupsList.Add(new Object[] { GroupName, MemberUserName, MemberName, AccountType });
627                                }
628                            }
629                            else
630                            {
631                                GroupName = (Convert.ToString(MemberGroups.Value).Split(',')[0]).Split('=')[1];
632                                GroupsList.Add(new Object[] { GroupName, MemberUserName, MemberName, AccountType });
633                            }
634                        }
635                    }
636                    if (Users.Contains(SamAccountType))
637                    {
638                        AccountType = "user";
639                        MemberName = ((Convert.ToString(AdGroup.Members["DistinguishedName"].Value)).Split(',')[0]).Split('=')[1];
640                        MemberUserName = Convert.ToString(AdGroup.Members["sAMAccountName"].Value);
641                        Microsoft.ActiveDirectory.Management.ADPropertyValueCollection MemberGroups = (Microsoft.ActiveDirectory.Management.ADPropertyValueCollection)AdGroup.Members["memberof"].Value;
642                        if (AdGroup.Members["memberof"].Value != null)
643                        {
644                            if (MemberGroups.Value is System.String[])
645                            {
646                                foreach (String GroupMember in (System.String[])MemberGroups.Value)
647                                {
648                                    GroupName = ((Convert.ToString(GroupMember)).Split(',')[0]).Split('=')[1];
649                                    GroupsList.Add(new Object[] { GroupName, MemberUserName, MemberName, AccountType });
650                                }
651                            }
652                            else
653                            {
654                                GroupName = (Convert.ToString(MemberGroups.Value).Split(',')[0]).Split('=')[1];
655                                GroupsList.Add(new Object[] { GroupName, MemberUserName, MemberName, AccountType });
656                            }
657                        }
658                    }
659                    if (Computers.Contains(SamAccountType))
660                    {
661                        AccountType = "computer";
662                        MemberName = ((Convert.ToString(AdGroup.Members["DistinguishedName"].Value)).Split(',')[0]).Split('=')[1];
663                        MemberUserName = Convert.ToString(AdGroup.Members["sAMAccountName"].Value);
664                        Microsoft.ActiveDirectory.Management.ADPropertyValueCollection MemberGroups = (Microsoft.ActiveDirectory.Management.ADPropertyValueCollection)AdGroup.Members["memberof"].Value;
665                        if (AdGroup.Members["memberof"].Value != null)
666                        {
667                            if (MemberGroups.Value is System.String[])
668                            {
669                                foreach (String GroupMember in (System.String[])MemberGroups.Value)
670                                {
671                                    GroupName = ((Convert.ToString(GroupMember)).Split(',')[0]).Split('=')[1];
672                                    GroupsList.Add(new Object[] { GroupName, MemberUserName, MemberName, AccountType });
673                                }
674                            }
675                            else
676                            {
677                                GroupName = (Convert.ToString(MemberGroups.Value).Split(',')[0]).Split('=')[1];
678                                GroupsList.Add(new Object[] { GroupName, MemberUserName, MemberName, AccountType });
679                            }
680                        }
681                    }
682                    if (TrustAccounts.Contains(SamAccountType))
683                    {
684                        // TO DO
685                    }
686                    return GroupsList.ToArray();
687                }
688                catch (Exception e)
689                {
690                    Console.WriteLine("{0} Exception caught.", e);
691                    return new Object[] { };
692                }
693            }
694        }
695
696        class ComputerRecordProcessor : IRecordProcessor
697        {
698            public Object[] processRecord(Object record)
699            {
700                try
701                {
702                    PSObject AdComputer = (PSObject) record;
703                    int DaysSinceLastPasswordChange = -1;
704                    int DaysSinceLastLogon = -1;
705                    DateTime LastLogonDate = Convert.ToDateTime(AdComputer.Members["LastLogonDate"].Value);
706                    if (AdComputer.Members["LastLogonDate"].Value != null)
707                    {
708                        DaysSinceLastLogon = Math.Abs((Date1 - LastLogonDate).Days);
709                    }
710                    DateTime PasswordLastSet = Convert.ToDateTime(AdComputer.Members["PasswordLastSet"].Value);
711                    if (AdComputer.Members["PasswordLastSet"].Value != null)
712                    {
713                        DaysSinceLastPasswordChange = Math.Abs((Date1 - PasswordLastSet).Days);
714                    }
715                    return new Object[] { AdComputer.Members["Name"].Value, AdComputer.Members["DNSHostName"].Value, AdComputer.Members["Enabled"].Value, AdComputer.Members["IPv4Address"].Value, (AdComputer.Members["OperatingSystem"].Value != null ? AdComputer.Members["OperatingSystem"].Value : "-"), DaysSinceLastLogon, DaysSinceLastPasswordChange, AdComputer.Members["TrustedForDelegation"].Value, AdComputer.Members["TrustedToAuthForDelegation"].Value, AdComputer.Members["SamAccountName"].Value, AdComputer.Members["primaryGroupID"].Value, AdComputer.Members["Description"].Value, PasswordLastSet, LastLogonDate, AdComputer.Members["whenCreated"].Value, AdComputer.Members["whenChanged"].Value, AdComputer.Members["DistinguishedName"].Value };
716                }
717                catch (Exception e)
718                {
719                    Console.WriteLine("{0} Exception caught.", e);
720                    return new Object[] { };
721                }
722            }
723        }
724
725        class ComputerSPNRecordProcessor : IRecordProcessor
726        {
727            public Object[] processRecord(Object record)
728            {
729                try
730                {
731                    PSObject AdComputer = (PSObject) record;
732                    List<Object> SPNList = new List<Object>();
733                    Microsoft.ActiveDirectory.Management.ADPropertyValueCollection SPNs = (Microsoft.ActiveDirectory.Management.ADPropertyValueCollection)AdComputer.Members["servicePrincipalName"].Value;
734                    if (SPNs.Value is System.String[])
735                    {
736                        foreach (String SPN in (System.String[])SPNs.Value)
737                        {
738                            String[] SPNArray = SPN.Split('/');
739                            SPNList.Add(new Object[] { AdComputer.Members["Name"].Value, SPNArray[0], SPNArray[1] });
740                        }
741                    }
742                    else
743                    {
744                        String[] SPNArray = Convert.ToString(SPNs.Value).Split('/');
745                        SPNList.Add(new Object[] { AdComputer.Members["Name"].Value, SPNArray[0], SPNArray[1] });
746                    }
747                    return SPNList.ToArray();
748                }
749                catch (Exception e)
750                {
751                    Console.WriteLine("{0} Exception caught.", e);
752                    return new Object[] { };
753                }
754            }
755        }
756
757        //The interface and implmentation class used to handle the results (this implementation just writes the strings to a file)
758
759        interface IResultsHandler
760        {
761            void processResults(Object[] t);
762
763            void finalise();
764        }
765
766        abstract class SimpleResultsHandler : IResultsHandler
767        {
768            private Object lockObj = new Object();
769            private List<String> processed = new List<String>();
770            private readonly int flushCnt;
771
772            public SimpleResultsHandler(int flushCnt)
773            {
774                this.flushCnt = flushCnt;
775            }
776
777            public void processResults(Object[] results)
778            {
779                lock (lockObj)
780                {
781                    if (results.Length != 0)
782                    {
783                        if (results[0] is System.Object[])
784                        {
785                            for (var i = 0; i < results.Length; i++)
786                            {
787                                processed.Add(convertObject((Object[])results[i]));
788                            }
789                        }
790                        else
791                        {
792                            processed.Add(convertObject(results));
793                        }
794                        if (flushCnt > 0)
795                        {
796                            if (processed.Count >= flushCnt)
797                            {
798                                writeFile();
799                            }
800                        }
801                    }
802                }
803            }
804
805            public void finalise()
806            {
807                writeFile();
808            }
809
810            private void writeFile()
811            {
812                lock (lockObj)
813                {
814                    using (StreamWriter outputFile = new StreamWriter(@ADWSClass.FilePath, true))
815                    {
816                        outputFile.Write(String.Join("\r\n", processed.ToArray()));
817                    }
818                    processed.Clear();
819                }
820            }
821
822            protected abstract String convertObject(Object[] resultsObject);
823        }
824
825
826        class CsvResultsHandler : SimpleResultsHandler
827        {
828            public CsvResultsHandler(int flushCnt) : base(flushCnt)
829            {
830            }
831
832            protected override String convertObject(Object[] resultsObject)
833            {
834                return createCsvLine(resultsObject);
835            }
836
837            static String createCsvLine(Object[] resultsObject)
838            {
839                try
840                {
841                    // No String.Join(String, Object[]) in CLR 2.0.50727 (Windows 7)
842                    String[] row = new String[resultsObject.Length];
843                    for (int i=0; i < resultsObject.Length; i++)
844                    {
845                        //String StringtoClean = Regex.Replace(Convert.ToString(resultsObject[i]),@"[^\S ]+", "");
846                        String StringtoClean = String.Join(" ", ((Convert.ToString(resultsObject[i])).Split((string[]) null, StringSplitOptions.RemoveEmptyEntries)));
847			            foreach (String Replacement in Replacements.Keys)
848			            {
849                            StringtoClean = StringtoClean.Replace(Replacement, Replacements[Replacement]);
850                        }
851                        row[i] = StringtoClean;
852                    }
853                    return "\"" + String.Join("\",\"", row) + "\"";
854                }
855                catch (Exception e)
856                {
857                    Console.WriteLine("{0} Exception caught.", e);
858                    return "";
859                }
860            }
861        }
862
863        class TxtResultsHandler : SimpleResultsHandler
864        {
865            public TxtResultsHandler(int flushCnt) : base(flushCnt)
866            {
867            }
868
869            protected override String convertObject(Object[] resultsObject)
870            {
871                try
872                {
873                    // No String.Join(String, Object[]) in CLR 2.0.50727 (Windows 7)
874                    String[] row = new String[resultsObject.Length];
875                    for (int i=0; i < resultsObject.Length; i++)
876                    {
877                        //String StringtoClean = Regex.Replace(Convert.ToString(resultsObject[i]),@"[^\S ]+", "");
878                        String StringtoClean = String.Join(" ", ((Convert.ToString(resultsObject[i])).Split((string[]) null, StringSplitOptions.RemoveEmptyEntries)));
879			            foreach (String Replacement in Replacements.Keys)
880			            {
881                            StringtoClean = StringtoClean.Replace(Replacement, Replacements[Replacement]);
882                        }
883                        row[i] = StringtoClean;
884                    }
885                    return String.Join("\t", row);
886                }
887                catch (Exception e)
888                {
889                    Console.WriteLine("{0} Exception caught.", e);
890                    return "";
891                }
892            }
893        }
894    }
895}
896"@
897
898$LDAPSource = @"
899// Thanks Dennis Albuquerque for the C# multithreading code
900using System;
901using System.Collections.Generic;
902using System.IO;
903using System.Threading;
904using System.Text.RegularExpressions;
905using System.DirectoryServices;
906using System.Security.Principal;
907
908namespace ADRecon
909{
910    public static class LDAPClass
911    {
912        private static DateTime Date1;
913        private static int PassMaxAge;
914        private static int DormantTimeSpan;
915        private static string FilePath;
916        private static Dictionary<string, bool> CannotChangePasswordDict;
917        private static readonly HashSet<string> Groups = new HashSet<string> ( new String[] {"268435456", "268435457", "536870912", "536870913"} );
918        private static readonly HashSet<string> Users = new HashSet<string> ( new String[] { "805306368" } );
919        private static readonly HashSet<string> Computers = new HashSet<string> ( new String[] { "805306369" }) ;
920        private static readonly HashSet<string> TrustAccounts = new HashSet<string> ( new String[] { "805306370" } );
921
922        [Flags]
923        //Values taken from https://support.microsoft.com/en-au/kb/305144
924        public enum UACFlags
925        {
926            SCRIPT = 1,        // 0x1
927            ACCOUNTDISABLE = 2,        // 0x2
928            HOMEDIR_REQUIRED = 8,        // 0x8
929            LOCKOUT = 16,       // 0x10
930            PASSWD_NOTREQD = 32,       // 0x20
931            PASSWD_CANT_CHANGE = 64,       // 0x40
932            ENCRYPTED_TEXT_PASSWORD_ALLOWED = 128,      // 0x80
933            TEMP_DUPLICATE_ACCOUNT = 256,      // 0x100
934            NORMAL_ACCOUNT = 512,      // 0x200
935            INTERDOMAIN_TRUST_ACCOUNT = 2048,     // 0x800
936            WORKSTATION_TRUST_ACCOUNT = 4096,     // 0x1000
937            SERVER_TRUST_ACCOUNT = 8192,     // 0x2000
938            DONT_EXPIRE_PASSWD = 65536,    // 0x10000
939            MNS_LOGON_ACCOUNT = 131072,   // 0x20000
940            SMARTCARD_REQUIRED = 262144,   // 0x40000
941            TRUSTED_FOR_DELEGATION = 524288,   // 0x80000
942            NOT_DELEGATED = 1048576,  // 0x100000
943            USE_DES_KEY_ONLY = 2097152,  // 0x200000
944            DONT_REQUIRE_PREAUTH = 4194304,  // 0x400000
945            PASSWORD_EXPIRED = 8388608,  // 0x800000
946            TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION = 16777216, // 0x1000000
947            PARTIAL_SECRETS_ACCOUNT = 67108864 // 0x04000000
948        }
949
950		private static readonly Dictionary<String, String> Replacements = new Dictionary<String, String>()
951        {
952            //{System.Environment.NewLine, ""},
953            //{",", ";"},
954            {"\"", "'"}
955        };
956
957        public static void UserParser(Object[] AdUsers, DateTime Date1, int PassMaxAge, string FilePath, Dictionary<string, bool> CannotChangePasswordDict, int DormantTimeSpan, int numOfThreads, int flushCnt)
958        {
959            LDAPClass.Date1 = Date1;
960            LDAPClass.PassMaxAge = PassMaxAge;
961            LDAPClass.DormantTimeSpan = DormantTimeSpan;
962            LDAPClass.FilePath = FilePath;
963            LDAPClass.CannotChangePasswordDict = CannotChangePasswordDict;
964
965            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
966            {
967                string HeaderRow = String.Format("Name,UserName,Enabled,Cannot Change Password,Password Never Expires,Must Change Password at Logon,Days Since Last Password Change,Password Not Changed after Max Age,Account Locked Out,Never Logged in,Days Since Last Logon,Dormant (> {0} days),Reversibly Encryped Password,Password Not Required,Trusted for Delegation,Trusted to Auth for Delegation,Does Not Require Pre Auth,Logon Workstations,AdminCount,Primary GroupID,SID,SIDHistory,Description,Password LastSet,Last Logon Date,When Created,When Changed,DistinguishedName,CanonicalName",DormantTimeSpan);
968                file.WriteLine(HeaderRow);
969            }
970            Console.WriteLine("[*] Total Users: " + AdUsers.Length);
971            runProcessor(AdUsers, numOfThreads, flushCnt, "Users", "CSV");
972        }
973
974        public static void UserSPNParser(Object[] AdUsers, string FilePath, int numOfThreads, int flushCnt)
975        {
976            LDAPClass.FilePath = FilePath;
977
978            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
979            {
980                string HeaderRow = "Name,Username,Service,Host,Password Last Set,Description";
981                file.WriteLine(HeaderRow);
982            }
983            runProcessor(AdUsers, numOfThreads, flushCnt, "UserSPNs", "CSV");
984        }
985
986        public static void GroupParser(Object[] AdGroups, string FilePath, int numOfThreads, int flushCnt)
987        {
988            LDAPClass.FilePath = FilePath;
989
990            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
991            {
992                string HeaderRow = "Group,ManagedBy,whenCreated,whenChanged,Description,SID,DistinguishedName,CanonicalName";
993                file.WriteLine(HeaderRow);
994            }
995            Console.WriteLine("[*] Total Groups: " + AdGroups.Length);
996            runProcessor(AdGroups, numOfThreads, flushCnt, "Groups", "CSV");
997        }
998
999        public static void GroupMemberParser(Object[] AdGroupMembers, string FilePath, int numOfThreads, int flushCnt)
1000        {
1001            LDAPClass.FilePath = FilePath;
1002
1003            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
1004            {
1005                string HeaderRow = "Group Name, Member UserName, Member Name, AccountType";
1006                file.WriteLine(HeaderRow);
1007            }
1008            Console.WriteLine("[*] Total GroupMember Objects: " + AdGroupMembers.Length);
1009            runProcessor(AdGroupMembers, numOfThreads, flushCnt, "GroupMembers", "CSV");
1010        }
1011
1012        public static void ComputerParser(Object[] AdComputers, DateTime Date1, string FilePath, int numOfThreads, int flushCnt)
1013        {
1014            LDAPClass.Date1 = Date1;
1015            LDAPClass.FilePath = FilePath;
1016
1017            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
1018            {
1019                string HeaderRow = "Name,DNSHostName,Enabled,OperatingSystem,Days Since Last Logon,Days Since Last Password Change,Trusted for Delegation,Trusted to Auth for Delegation,Username,Primary Group ID,Description,Password LastSet,Last Logon Date,whenCreated,whenChanged,Distinguished Name";
1020                file.WriteLine(HeaderRow);
1021            }
1022            Console.WriteLine("[*] Total Computers: " + AdComputers.Length);
1023            runProcessor(AdComputers, numOfThreads, flushCnt, "Computers", "CSV");
1024        }
1025
1026        public static void ComputerSPNParser(Object[] AdComputers, string FilePath, int numOfThreads, int flushCnt)
1027        {
1028            LDAPClass.FilePath = FilePath;
1029
1030            using (System.IO.StreamWriter file = new System.IO.StreamWriter(@FilePath))
1031            {
1032                string HeaderRow = "Name,Service,Host";
1033                file.WriteLine(HeaderRow);
1034            }
1035            runProcessor(AdComputers, numOfThreads, flushCnt, "ComputerSPNs", "CSV");
1036        }
1037
1038        static void runProcessor(Object[] arrayToProcess, int numOfThreads, int flushCnt, string processorType, String resultHandlerType)
1039        {
1040            int totalRecords = arrayToProcess.Length;
1041            //Console.WriteLine(String.Format("Running {0} records over {1} threads, flushing every {2} records",
1042            //    totalRecords, numOfThreads, (flushCnt < 0 ? "NEVER" : flushCnt.ToString())));
1043            IRecordProcessor recordProcessor = recordProcessorFactory(processorType);
1044            IResultsHandler resultsHandler = resultHandlerFactory(resultHandlerType, flushCnt);
1045            int numberOfRecordsPerThread = totalRecords / numOfThreads;
1046            int remainders = totalRecords % numOfThreads;
1047
1048            Thread[] threads = new Thread[numOfThreads];
1049            for (int i = 0; i < numOfThreads; i++)
1050            {
1051                int numberOfRecordsToProcess = numberOfRecordsPerThread;
1052                if (i == (numOfThreads - 1))
1053                {
1054                    //last thread, do the remaining records
1055                    numberOfRecordsToProcess += remainders;
1056                }
1057
1058                //split the full array into chunks to be given to different threads
1059                Object[] sliceToProcess = new Object[numberOfRecordsToProcess];
1060                Array.Copy(arrayToProcess, i * numberOfRecordsPerThread, sliceToProcess, 0, numberOfRecordsToProcess);
1061                ProcessorThread processorThread = new ProcessorThread(i, recordProcessor, resultsHandler, sliceToProcess);
1062                threads[i] = new Thread(processorThread.processThreadRecords);
1063                threads[i].Start();
1064            }
1065            foreach (Thread t in threads)
1066            {
1067                t.Join();
1068            }
1069
1070            resultsHandler.finalise();
1071        }
1072
1073        static IRecordProcessor recordProcessorFactory(String name)
1074        {
1075            switch (name)
1076            {
1077                case "Users":
1078                    return new UserRecordProcessor();
1079                case "UserSPNs":
1080                    return new UserSPNRecordProcessor();
1081                case "Groups":
1082                    return new GroupRecordProcessor();
1083                case "GroupMembers":
1084                    return new GroupMemberRecordProcessor();
1085                case "Computers":
1086                    return new ComputerRecordProcessor();
1087                case "ComputerSPNs":
1088                    return new ComputerSPNRecordProcessor();
1089            }
1090            throw new ArgumentException("Invalid processor type " + name);
1091        }
1092
1093        static IResultsHandler resultHandlerFactory(String name, int flushCnt)
1094        {
1095            switch (name)
1096            {
1097                case "CSV":
1098                    return new CsvResultsHandler(flushCnt);
1099                case "TXT":
1100                    return new TxtResultsHandler(flushCnt);
1101            }
1102            throw new ArgumentException("Invalid processor type " + name);
1103        }
1104
1105        class ProcessorThread
1106        {
1107            readonly int id;
1108            readonly IRecordProcessor recordProcessor;
1109            readonly IResultsHandler resultsHandler;
1110            readonly Object[] objectsToBeProcessed;
1111
1112            public ProcessorThread(int id, IRecordProcessor recordProcessor, IResultsHandler resultsHandler, Object[] objectsToBeProcessed)
1113            {
1114                this.recordProcessor = recordProcessor;
1115                this.id = id;
1116                this.resultsHandler = resultsHandler;
1117                this.objectsToBeProcessed = objectsToBeProcessed;
1118            }
1119
1120            public void processThreadRecords()
1121            {
1122                for (int i = 0; i < objectsToBeProcessed.Length; i++)
1123                {
1124                    Object[] result = recordProcessor.processRecord(objectsToBeProcessed[i]);
1125                    resultsHandler.processResults(result); //this is a thread safe operation
1126                }
1127            }
1128        }
1129
1130        //The interface and implmentation class used to process a record (this implemmentation just returns a log type string)
1131
1132        interface IRecordProcessor
1133        {
1134            Object[] processRecord(Object record);
1135        }
1136
1137        class UserRecordProcessor : IRecordProcessor
1138        {
1139            public Object[] processRecord(Object record)
1140            {
1141                try
1142                {
1143                    SearchResult AdUser = (SearchResult) record;
1144                    bool? Enabled = null;
1145                    bool? PasswordNeverExpires = null;
1146                    bool? AccountLockedOut = null;
1147                    bool? ReversiblyEncrypedPassword = null;
1148                    bool? PasswordNotRequired = null;
1149                    bool? TrustedforDelegation = null;
1150                    bool? TrustedtoAuthforDelegation = null;
1151                    bool? DoesNotRequirePreAuth = null;
1152                    // When the user is not allowed to query the UserAccountControl attribute.
1153                    if (AdUser.Properties["useraccountcontrol"].Count != 0)
1154                    {
1155                        var userFlags = (UACFlags) AdUser.Properties["useraccountcontrol"][0];
1156                        Enabled = !((userFlags & UACFlags.ACCOUNTDISABLE) == UACFlags.ACCOUNTDISABLE);
1157                        PasswordNeverExpires = (userFlags & UACFlags.DONT_EXPIRE_PASSWD) == UACFlags.DONT_EXPIRE_PASSWD;
1158                        AccountLockedOut = (userFlags & UACFlags.LOCKOUT) == UACFlags.LOCKOUT;
1159                        ReversiblyEncrypedPassword = (userFlags & UACFlags.ENCRYPTED_TEXT_PASSWORD_ALLOWED) == UACFlags.ENCRYPTED_TEXT_PASSWORD_ALLOWED;
1160                        PasswordNotRequired = (userFlags & UACFlags.PASSWD_NOTREQD) == UACFlags.PASSWD_NOTREQD;
1161                        TrustedforDelegation = (userFlags & UACFlags.TRUSTED_FOR_DELEGATION) == UACFlags.TRUSTED_FOR_DELEGATION;
1162                        TrustedtoAuthforDelegation = (userFlags & UACFlags.TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION) == UACFlags.TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION;
1163                        DoesNotRequirePreAuth = (userFlags & UACFlags.DONT_REQUIRE_PREAUTH) == UACFlags.DONT_REQUIRE_PREAUTH;
1164                    }
1165                    bool MustChangePasswordatLogon = false;
1166                    int DaysSinceLastPasswordChange = -1;
1167                    bool PasswordNotChangedafterMaxAge = false;
1168                    bool NeverLoggedIn = false;
1169                    int DaysSinceLastLogon = -1;
1170                    bool Dormant = false;
1171                    DateTime PasswordLastSet = new DateTime();
1172                    DateTime LastLogonDate = new DateTime();
1173                    bool CannotChangePassword = CannotChangePasswordDict[Convert.ToString(AdUser.Properties["samaccountname"][0])];
1174                    if (AdUser.Properties["pwdLastSet"].Count != 0)
1175                    {
1176                        if (Convert.ToString(AdUser.Properties["pwdlastset"][0]) == "0")
1177                        {
1178                            MustChangePasswordatLogon = true;
1179                        }
1180                        else
1181                        {
1182                            PasswordLastSet = DateTime.FromFileTime((long)(AdUser.Properties["pwdLastSet"][0]));
1183                            DaysSinceLastPasswordChange = Math.Abs((Date1 - PasswordLastSet).Days);
1184                            if (DaysSinceLastPasswordChange > PassMaxAge)
1185                            {
1186                                PasswordNotChangedafterMaxAge = true;
1187                            }
1188                        }
1189                    }
1190                    if (AdUser.Properties["lastlogontimestamp"].Count != 0)
1191                    {
1192                        LastLogonDate = DateTime.FromFileTime((long)(AdUser.Properties["lastlogontimestamp"][0]));
1193                        DaysSinceLastLogon = Math.Abs((Date1 - LastLogonDate).Days);
1194                        if (DaysSinceLastLogon > DormantTimeSpan)
1195                        {
1196                            Dormant = true;
1197                        }
1198                    }
1199                    else
1200                    {
1201                        NeverLoggedIn = true;
1202                    }
1203                    string SIDHistory = "";
1204                    if (AdUser.Properties["sidhistory"].Count >= 1)
1205                    {
1206                        string sids = "";
1207                        for (int i = 0; i < AdUser.Properties["sidhistory"].Count; i++)
1208                        {
1209                            var history = AdUser.Properties["sidhistory"][i];
1210                            sids = sids + "," + Convert.ToString(new SecurityIdentifier((byte[])history, 0));
1211                        }
1212                        SIDHistory = sids.TrimStart(',');
1213                    }
1214                    return new Object[] { (AdUser.Properties["name"].Count != 0 ? AdUser.Properties["name"][0] : ""), (AdUser.Properties["samaccountname"].Count != 0 ? AdUser.Properties["samaccountname"][0] : ""), Enabled, CannotChangePassword, PasswordNeverExpires, MustChangePasswordatLogon, DaysSinceLastPasswordChange, PasswordNotChangedafterMaxAge, AccountLockedOut, NeverLoggedIn, DaysSinceLastLogon, Dormant, ReversiblyEncrypedPassword, PasswordNotRequired, TrustedforDelegation, TrustedtoAuthforDelegation, DoesNotRequirePreAuth, (AdUser.Properties["userworkstations"].Count != 0 ? AdUser.Properties["userworkstations"][0] : ""), (AdUser.Properties["admincount"].Count != 0 ? AdUser.Properties["admincount"][0] : ""), (AdUser.Properties["primarygroupid"].Count != 0 ? AdUser.Properties["primarygroupid"][0] : ""), Convert.ToString(new SecurityIdentifier((byte[])AdUser.Properties["objectSID"][0], 0)), SIDHistory, (AdUser.Properties["Description"].Count != 0 ? AdUser.Properties["Description"][0] : ""), PasswordLastSet, LastLogonDate, (AdUser.Properties["whencreated"].Count != 0 ? AdUser.Properties["whencreated"][0] : ""), (AdUser.Properties["whenchanged"].Count != 0 ? AdUser.Properties["whenchanged"][0] : ""), (AdUser.Properties["distinguishedname"].Count != 0 ? AdUser.Properties["distinguishedname"][0] : ""), (AdUser.Properties["canonicalname"].Count != 0 ? AdUser.Properties["canonicalname"][0] : "") };
1215                }
1216                catch (Exception e)
1217                {
1218                    Console.WriteLine("{0} Exception caught.", e);
1219                    return new Object[] { };
1220                }
1221            }
1222        }
1223
1224        class UserSPNRecordProcessor : IRecordProcessor
1225        {
1226            public Object[] processRecord(Object record)
1227            {
1228                try
1229                {
1230                    SearchResult AdUser = (SearchResult) record;
1231                    List<Object> SPNList = new List<Object>();
1232                    DateTime PasswordLastSet = DateTime.FromFileTime((long)(AdUser.Properties["pwdLastSet"][0]));
1233                    String Description = (AdUser.Properties["Description"].Count != 0 ? Convert.ToString(AdUser.Properties["Description"][0]) : "");
1234                    foreach (String SPN in AdUser.Properties["serviceprincipalname"])
1235                    {
1236                        String[] SPNArray = SPN.Split('/');
1237                        SPNList.Add(new Object[] { AdUser.Properties["name"][0], AdUser.Properties["samaccountname"][0], SPNArray[0], SPNArray[1], PasswordLastSet, Description });
1238                    }
1239                    return SPNList.ToArray();
1240                }
1241                catch (Exception e)
1242                {
1243                    Console.WriteLine("{0} Exception caught.", e);
1244                    return new Object[] { };
1245                }
1246            }
1247        }
1248
1249        class GroupRecordProcessor : IRecordProcessor
1250        {
1251            public Object[] processRecord(Object record)
1252            {
1253                try
1254                {
1255
1256                    SearchResult AdGroup = (SearchResult) record;
1257                    string ManagedByValue = AdGroup.Properties["managedby"].Count != 0 ? Convert.ToString(AdGroup.Properties["managedby"][0]) : "";
1258                    string ManagedBy = "";
1259                    if (AdGroup.Properties["managedBy"].Count != 0)
1260                    {
1261                        ManagedBy = (ManagedByValue.Split(',')[0]).Split('=')[1];
1262                    }
1263                    return new Object[] { AdGroup.Properties["samaccountname"][0], ManagedBy, AdGroup.Properties["whencreated"][0], AdGroup.Properties["whenchanged"][0], (AdGroup.Properties["Description"].Count != 0 ? AdGroup.Properties["Description"][0] : ""), Convert.ToString(new SecurityIdentifier((byte[])AdGroup.Properties["objectSID"][0], 0)), AdGroup.Properties["distinguishedname"][0], AdGroup.Properties["canonicalname"][0] };
1264                }
1265                catch (Exception e)
1266                {
1267                    Console.WriteLine("{0} Exception caught.", e);
1268                    return new Object[] { };
1269                }
1270            }
1271        }
1272
1273        class GroupMemberRecordProcessor : IRecordProcessor
1274        {
1275            public Object[] processRecord(Object record)
1276            {
1277                try
1278                {
1279                    // https://github.com/BloodHoundAD/BloodHound/blob/master/PowerShell/BloodHound.ps1
1280                    SearchResult AdGroup = (SearchResult) record;
1281                    List<Object> GroupsList = new List<Object>();
1282                    string SamAccountType = AdGroup.Properties["samaccounttype"].Count != 0 ? Convert.ToString(AdGroup.Properties["samaccounttype"][0]) : "";
1283                    string AccountType = "";
1284                    string GroupName = "";
1285                    string MemberUserName = "-";
1286                    string MemberName = "";
1287                    if (Groups.Contains(SamAccountType))
1288                    {
1289                        AccountType = "group";
1290                        MemberName = ((Convert.ToString(AdGroup.Properties["DistinguishedName"][0])).Split(',')[0]).Split('=')[1];
1291                        foreach (String GroupMember in AdGroup.Properties["memberof"])
1292                        {
1293                            GroupName = ((Convert.ToString(GroupMember)).Split(',')[0]).Split('=')[1];
1294                            GroupsList.Add(new Object[] { GroupName, MemberUserName, MemberName, AccountType });
1295                        }
1296                    }
1297                    if (Users.Contains(SamAccountType))
1298                    {
1299                        AccountType = "user";
1300                        MemberName = ((Convert.ToString(AdGroup.Properties["DistinguishedName"][0])).Split(',')[0]).Split('=')[1];
1301                        MemberUserName = Convert.ToString(AdGroup.Properties["sAMAccountName"][0]);
1302                        foreach (String GroupMember in AdGroup.Properties["memberof"])
1303                        {
1304                            GroupName = ((Convert.ToString(GroupMember)).Split(',')[0]).Split('=')[1];
1305                            GroupsList.Add(new Object[] { GroupName, MemberUserName, MemberName, AccountType });
1306                        }
1307                    }
1308                    if (Computers.Contains(SamAccountType))
1309                    {
1310                        AccountType = "computer";
1311                        MemberName = ((Convert.ToString(AdGroup.Properties["DistinguishedName"][0])).Split(',')[0]).Split('=')[1];
1312                        MemberUserName = Convert.ToString(AdGroup.Properties["sAMAccountName"][0]);
1313                        foreach (String GroupMember in AdGroup.Properties["memberof"])
1314                        {
1315                            GroupName = ((Convert.ToString(GroupMember)).Split(',')[0]).Split('=')[1];
1316                            GroupsList.Add(new Object[] { GroupName, MemberUserName, MemberName, AccountType });
1317                        }
1318                    }
1319                    if (TrustAccounts.Contains(SamAccountType))
1320                    {
1321                        // TO DO
1322                    }
1323                    return GroupsList.ToArray();
1324                }
1325                catch (Exception e)
1326                {
1327                    Console.WriteLine(((SearchResult)record).Properties["DistinguishedName"][0]);
1328                    Console.WriteLine("{0} Exception caught.", e);
1329                    return new Object[] { };
1330                }
1331            }
1332        }
1333
1334        class ComputerRecordProcessor : IRecordProcessor
1335        {
1336            public Object[] processRecord(Object record)
1337            {
1338                try
1339                {
1340                    SearchResult AdComputer = (SearchResult) record;
1341                    bool? Enabled = null;
1342                    bool? TrustedforDelegation = null;
1343                    bool? TrustedtoAuthforDelegation = null;
1344                    // When the user is not allowed to query the UserAccountControl attribute.
1345                    if (AdComputer.Properties["useraccountcontrol"].Count != 0)
1346                    {
1347                        var userFlags = (UACFlags) AdComputer.Properties["useraccountcontrol"][0];
1348                        Enabled = !((userFlags & UACFlags.ACCOUNTDISABLE) == UACFlags.ACCOUNTDISABLE);
1349                        TrustedforDelegation = (userFlags & UACFlags.TRUSTED_FOR_DELEGATION) == UACFlags.TRUSTED_FOR_DELEGATION;
1350                        TrustedtoAuthforDelegation = (userFlags & UACFlags.TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION) == UACFlags.TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION;
1351                    }
1352                    int DaysSinceLastPasswordChange = -1;
1353                    int DaysSinceLastLogon = -1;
1354                    DateTime LastLogonDate = new DateTime();
1355                    if (AdComputer.Properties["lastlogontimestamp"].Count != 0)
1356                    {
1357                        LastLogonDate = DateTime.FromFileTime((long)(AdComputer.Properties["lastlogontimestamp"][0]));
1358                        DaysSinceLastLogon = Math.Abs((Date1 - LastLogonDate).Days);
1359                        if (DaysSinceLastLogon >= 152246)
1360                        {
1361                            DaysSinceLastLogon = -1;
1362                        }
1363                    }
1364                    DateTime PasswordLastSet = DateTime.FromFileTime((long)(AdComputer.Properties["pwdLastSet"][0]));
1365                    if (AdComputer.Properties["pwdLastSet"].Count != 0)
1366                    {
1367                        DaysSinceLastPasswordChange = Math.Abs((Date1 - PasswordLastSet).Days);
1368                        if (DaysSinceLastPasswordChange >= 152246)
1369                        {
1370                            DaysSinceLastPasswordChange = -1;
1371                        }
1372                    }
1373                    return new Object[] { (AdComputer.Properties["name"].Count != 0 ? AdComputer.Properties["name"][0] : ""), (AdComputer.Properties["dnshostname"].Count != 0 ? AdComputer.Properties["dnshostname"][0] : ""), Enabled, (AdComputer.Properties["operatingsystem"].Count != 0 ? AdComputer.Properties["operatingsystem"][0] : "-"), DaysSinceLastLogon, DaysSinceLastPasswordChange, TrustedforDelegation, TrustedtoAuthforDelegation, (AdComputer.Properties["samaccountname"].Count != 0 ? AdComputer.Properties["samaccountname"][0] : ""), (AdComputer.Properties["primarygroupid"].Count != 0 ? AdComputer.Properties["primarygroupid"][0] : ""), (AdComputer.Properties["Description"].Count != 0 ? AdComputer.Properties["Description"][0] : ""), PasswordLastSet, LastLogonDate, AdComputer.Properties["whencreated"][0], AdComputer.Properties["whenchanged"][0], AdComputer.Properties["distinguishedname"][0] };
1374                }
1375                catch (Exception e)
1376                {
1377                    Console.WriteLine(((SearchResult)record).Properties["name"][0]);
1378                    Console.WriteLine("{0} Exception caught.", e);
1379                    return new Object[] { };
1380                }
1381            }
1382        }
1383
1384        class ComputerSPNRecordProcessor : IRecordProcessor
1385        {
1386            public Object[] processRecord(Object record)
1387            {
1388                try
1389                {
1390                    SearchResult AdComputer = (SearchResult) record;
1391                    List<Object> SPNList = new List<Object>();
1392                    foreach (String SPN in AdComputer.Properties["serviceprincipalname"])
1393                    {
1394                        String[] SPNArray = SPN.Split('/');
1395                        SPNList.Add(new Object[] { AdComputer.Properties["name"][0], SPNArray[0], SPNArray[1] });
1396                    }
1397                    return SPNList.ToArray();
1398                }
1399                catch (Exception e)
1400                {
1401                    Console.WriteLine("{0} Exception caught.", e);
1402                    return new Object[] { };
1403                }
1404            }
1405        }
1406
1407        //The interface and implmentation class used to handle the results (this implementation just writes the strings to a file)
1408
1409        interface IResultsHandler
1410        {
1411            void processResults(Object[] t);
1412
1413            void finalise();
1414        }
1415
1416        abstract class SimpleResultsHandler : IResultsHandler
1417        {
1418            private Object lockObj = new Object();
1419            private List<String> processed = new List<String>();
1420            private readonly int flushCnt;
1421
1422            public SimpleResultsHandler(int flushCnt)
1423            {
1424                this.flushCnt = flushCnt;
1425            }
1426
1427            public void processResults(Object[] results)
1428            {
1429                lock (lockObj)
1430                {
1431                    if (results.Length != 0)
1432                    {
1433                        if (results[0] is System.Object[])
1434                        {
1435                            for (var i = 0; i < results.Length; i++)
1436                            {
1437                                processed.Add(convertObject((Object[])results[i]));
1438                            }
1439                        }
1440                        else
1441                        {
1442                            processed.Add(convertObject(results));
1443                        }
1444                        if (flushCnt > 0)
1445                        {
1446                            if (processed.Count >= flushCnt)
1447                            {
1448                                writeFile();
1449                            }
1450                        }
1451                    }
1452                }
1453            }
1454
1455            public void finalise()
1456            {
1457                writeFile();
1458            }
1459
1460            private void writeFile()
1461            {
1462                lock (lockObj)
1463                {
1464                    using (StreamWriter outputFile = new StreamWriter(@LDAPClass.FilePath, true))
1465                    {
1466                        outputFile.Write(String.Join("\r\n", processed.ToArray()));
1467                    }
1468                    processed.Clear();
1469                }
1470            }
1471
1472            protected abstract String convertObject(Object[] resultsObject);
1473        }
1474
1475
1476        class CsvResultsHandler : SimpleResultsHandler
1477        {
1478            public CsvResultsHandler(int flushCnt) : base(flushCnt)
1479            {
1480            }
1481
1482            protected override String convertObject(Object[] resultsObject)
1483            {
1484                return createCsvLine(resultsObject);
1485            }
1486
1487            static String createCsvLine(Object[] resultsObject)
1488            {
1489                try
1490                {
1491                    // No String.Join(String, Object[]) in CLR 2.0.50727 (Windows 7)
1492                    String[] row = new String[resultsObject.Length];
1493                    for (int i=0; i < resultsObject.Length; i++)
1494                    {
1495                        //String StringtoClean = Regex.Replace(Convert.ToString(resultsObject[i]),@"[^\S ]+", "");
1496                        String StringtoClean = String.Join(" ", ((Convert.ToString(resultsObject[i])).Split((string[]) null, StringSplitOptions.RemoveEmptyEntries)));
1497			            foreach (String Replacement in Replacements.Keys)
1498			            {
1499                            StringtoClean = StringtoClean.Replace(Replacement, Replacements[Replacement]);
1500                        }
1501                        row[i] = StringtoClean;
1502                    }
1503                    return "\"" + String.Join("\",\"", row) + "\"";
1504                }
1505                catch (Exception e)
1506                {
1507                    Console.WriteLine("{0} Exception caught.", e);
1508                    return "";
1509                }
1510            }
1511        }
1512
1513        class TxtResultsHandler : SimpleResultsHandler
1514        {
1515            public TxtResultsHandler(int flushCnt) : base(flushCnt)
1516            {
1517            }
1518
1519            protected override String convertObject(Object[] resultsObject)
1520            {
1521                try
1522                {
1523                    // No String.Join(String, Object[]) in CLR 2.0.50727 (Windows 7)
1524                    String[] row = new String[resultsObject.Length];
1525                    for (int i=0; i < resultsObject.Length; i++)
1526                    {
1527                        String StringtoClean = String.Join(" ", ((Convert.ToString(resultsObject[i])).Split((string[]) null, StringSplitOptions.RemoveEmptyEntries)));
1528			            foreach (String Replacement in Replacements.Keys)
1529			            {
1530                            StringtoClean = StringtoClean.Replace(Replacement, Replacements[Replacement]);
1531                        }
1532                        row[i] = StringtoClean;
1533                    }
1534                    return String.Join("\t", row);
1535                }
1536                catch (Exception e)
1537                {
1538                    Console.WriteLine("{0} Exception caught.", e);
1539                    return "";
1540                }
1541            }
1542        }
1543    }
1544}
1545"@
1546
1547#Add-Type -TypeDefinition $Source -ReferencedAssemblies ([System.String[]]@(([system.reflection.assembly]::LoadWithPartialName("Microsoft.ActiveDirectory.Management")).Location,([system.reflection.assembly]::LoadWithPartialName("System.DirectoryServices")).Location))
1548
1549Function Get-DayDiff
1550{
1551    param (
1552        [Parameter(Mandatory = $true)]
1553        [DateTime] $Date1,
1554
1555        [Parameter(Mandatory = $true)]
1556        [DateTime] $Date2
1557    )
1558    if ($Date2 -gt $Date1)
1559    {
1560        $DDiff = $Date2 - $Date1
1561    }
1562    Else
1563    {
1564        $DDiff = $Date1 - $Date2
1565    }
1566    Return $DDiff
1567}
1568
1569Function Get-DNtoFQDN
1570{
1571    param(
1572        [Parameter(Mandatory = $true)]
1573        [string] $ADObjectDN
1574    )
1575    # Modified version from https://adsecurity.org/?p=440
1576    [array] $ADObjectDNArray = $ADObjectDN -Split ("DC=")
1577    $ADObjectDNArray | ForEach-Object {
1578        [array] $temp = $_ -Split (",")
1579        [string] $ADObjectDNArrayItemDomainName += $temp[0] + "."
1580    }
1581    $ADObjectDNDomainName = $ADObjectDNArrayItemDomainName.Substring(1, $ADObjectDNArrayItemDomainName.Length - 2)
1582    Return $ADObjectDNDomainName
1583}
1584
1585Function Get-ADRExcelComObj
1586{
1587    #Check if Excel is installed.
1588    Try
1589    {
1590        $global:excel = New-Object -ComObject excel.application
1591    }
1592    Catch
1593    {
1594        Write-Warning "[*] Excel is not installed. Skipping ADRecon-Report.xlsx. Use the -GenExcel parameter to generate the ADRecon-Report.xslx on a host with Microsoft Excel installed."
1595        Write-Output "Run Get-Help .\ADRecon.ps1 -Examples for additional information."
1596        return $null
1597    }
1598    $excel.visible = $true
1599    $global:workbook = $excel.Workbooks.Add()
1600    If ($workbook.Worksheets.Count -eq 3)
1601    {
1602        $workbook.WorkSheets.Item(3).Delete()
1603        $workbook.WorkSheets.Item(2).Delete()
1604    }
1605}
1606
1607Function Get-ADRExcelWorkbook
1608{
1609    param (
1610        [Parameter(Mandatory = $true)]
1611        [string] $name
1612    )
1613    $workbook.Worksheets.Add() | Out-Null
1614    $worksheet = $workbook.Worksheets.Item(1)
1615    $worksheet.Name = $name
1616}
1617
1618Function Get-ADRExcelImport
1619{
1620    param (
1621        [Parameter(Mandatory = $true)]
1622        [string] $filename,
1623
1624        [Parameter(Mandatory = $true)]
1625        [int] $method
1626    )
1627    If ($method -eq 1)
1628    {
1629        $row = 1
1630        $column = 1
1631        $worksheet = $workbook.Worksheets.Item(1)
1632        If (Test-Path $filename)
1633        {
1634            $ADTemp = Import-Csv -Path $filename
1635            $ADTemp | ForEach-Object {
1636                Foreach ($prop in $_.PSObject.Properties)
1637                {
1638                    $worksheet.Cells.Item($row, $column) = $prop.Name
1639                    $worksheet.Cells.Item($row, $column + 1) = $prop.Value
1640                    $row++
1641                }
1642            }
1643            Remove-Variable ADTemp
1644            $listObject = $worksheet.ListObjects.Add([Microsoft.Office.Interop.Excel.XlListObjectSourceType]::xlSrcRange, $worksheet.UsedRange, $null, [Microsoft.Office.Interop.Excel.XlYesNoGuess]::xlYes, $null)
1645            $listObject.TableStyle = "TableStyleLight2" # Style Cheat Sheet: https://msdn.microsoft.com/en-au/library/documentformat.openxml.spreadsheet.tablestyle.aspx
1646            $usedRange = $worksheet.UsedRange
1647            $usedRange.EntireColumn.AutoFit() | Out-Null
1648        }
1649        Else
1650        {
1651            $worksheet.Cells.Item($row, $column) = "Error!"
1652        }
1653        Remove-Variable filename
1654    }
1655    Elseif ($method -eq 2)
1656    {
1657        If (Test-Path $filename)
1658        {
1659            $worksheet = $workbook.Worksheets.Item(1)
1660            $TxtConnector = ("TEXT;" + $filename)
1661            $CellRef = $worksheet.Range("A1")
1662            #Build, use and remove the text file connector
1663            $Connector = $worksheet.QueryTables.add($TxtConnector, $CellRef)
1664
1665            $worksheet.QueryTables.item($Connector.name).TextFileCommaDelimiter = $True
1666            $worksheet.QueryTables.item($Connector.name).TextFileParseType = 1
1667            $worksheet.QueryTables.item($Connector.name).Refresh() | Out-Null
1668            $worksheet.QueryTables.item($Connector.name).delete()
1669            $listObject = $worksheet.ListObjects.Add([Microsoft.Office.Interop.Excel.XlListObjectSourceType]::xlSrcRange, $worksheet.UsedRange, $null, [Microsoft.Office.Interop.Excel.XlYesNoGuess]::xlYes, $null)
1670            $listObject.TableStyle = "TableStyleLight2" # Style Cheat Sheet: https://msdn.microsoft.com/en-au/library/documentformat.openxml.spreadsheet.tablestyle.aspx
1671            $worksheet.UsedRange.EntireColumn.AutoFit() | Out-Null
1672        }
1673        Remove-Variable filename
1674    }
1675}
1676
1677Function Get-ADRExcelChart
1678{
1679    param (
1680        [Parameter(Mandatory = $true)]
1681        [int] $ChartType,
1682
1683        [Parameter(Mandatory = $true)]
1684        [int] $ChartLayout,
1685
1686        [Parameter(Mandatory = $true)]
1687        [string] $ChartTitle,
1688
1689        [Parameter(Mandatory = $true)]
1690        $RangetoCover,
1691
1692        [Parameter(Mandatory = $false)]
1693        $chartdata
1694    )
1695    $worksheet = $workbook.Worksheets.Item(1)
1696    $xlChart=[Microsoft.Office.Interop.Excel.XLChartType]
1697    $chart=$worksheet.Shapes.AddChart().Chart
1698    $chart.chartType= $ChartType
1699    $chart.ApplyLayout($ChartLayout)
1700    $xlDirection=[Microsoft.Office.Interop.Excel.XLDirection]
1701    If ($null -eq $chartdata)
1702    {
1703        $start=$worksheet.range("A1")
1704        #get the last cell
1705        $Y=$worksheet.Range($start,$start.End($xlDirection::xlDown))
1706        $start=$worksheet.range("B1")
1707        #get the last cell
1708        $X=$worksheet.Range($start,$start.End($xlDirection::xlDown))
1709        $chartdata=$worksheet.Range("A$($Y.item(1).Row):A$($Y.item($Y.count).Row),B$($X.item(1).Row):B$($X.item($X.count).Row)")
1710    }
1711    $chart.SetSourceData($chartdata)
1712    $chart.seriesCollection(1).Select() | Out-Null
1713    $chart.SeriesCollection(1).ApplyDataLabels() | out-Null
1714    #modify the chart title
1715    $chart.HasTitle = $True
1716    $chart.ChartTitle.Text = $ChartTitle
1717    If ($ChartTitle -eq "Status of User Accounts")
1718    {
1719        $chart.PlotBy = 1
1720        $chart.axes(2).axistitle.text = "Count"
1721    }
1722    #Reposition the Chart
1723    $temp = $worksheet.Range($RangetoCover)
1724    $chartparent = $chart.parent
1725    # $chartparent.placement = 3
1726    $chartparent.top = $temp.Top
1727    $chartparent.left = $temp.Left
1728    $chartparent.width = $temp.Width
1729    If ($ChartTitle -ne "Privileged Groups in AD")
1730    {
1731        $chartparent.height = $temp.Height
1732    }
1733    #$chart.Legend.Delete()
1734}
1735
1736Function Get-ADRGenExcel
1737{
1738    param(
1739        [Parameter(Mandatory = $true)]
1740        [string] $ExcelPath
1741    )
1742    $ExcelPath = $((Convert-Path $ExcelPath).TrimEnd("\"))
1743    $ReportPath = -join($ExcelPath,'\','CSV-Files')
1744    If (!(Test-Path $ReportPath))
1745    {
1746        Write-Output "[ERROR] Could not locate the CSV-Files directory ... Exiting"
1747        Return $null
1748    }
1749    Get-ADRExcelComObj
1750    If ($excel)
1751    {
1752        Write-Output "[*] Generating ADRecon-Report.xlsx"
1753
1754        $ADFileName = -join($ReportPath,'\','AboutADRecon.csv')
1755        If (Test-Path $ADFileName)
1756        {
1757            $worksheet= $workbook.Worksheets.Item(1)
1758            $worksheet.Name = "About ADRecon"
1759            Get-ADRExcelImport $ADFileName 1
1760            $worksheet.Hyperlinks.Add($worksheet.Cells.Item(3,2) , "https://github.com/sense-of-security/ADRecon", "" , "", "github.com/sense-of-security/ADRecon") | Out-Null
1761            $usedRange = $worksheet.UsedRange
1762            $usedRange.EntireColumn.AutoFit() | Out-Null
1763        }
1764
1765        $ADFileName = -join($ReportPath,'\','Forest.csv')
1766        If (Test-Path $ADFileName)
1767        {
1768            Get-ADRExcelWorkbook("AD Forest Info")
1769            Get-ADRExcelImport $ADFileName 1
1770        }
1771
1772        $ADFileName = -join($ReportPath,'\','Domain.csv')
1773        If (Test-Path $ADFileName)
1774        {
1775            Get-ADRExcelWorkbook("AD Domain Info")
1776            Get-ADRExcelImport $ADFileName 1
1777            $DomainObj = Import-CSV -Path $ADFileName
1778            $DomainName = -join($DomainObj.Name,"-")
1779            Remove-Variable DomainObj
1780        }
1781
1782        $ADFileName = -join($ReportPath,'\','DefaultPasswordPolicy.csv')
1783        If (Test-Path $ADFileName)
1784        {
1785            Get-ADRExcelWorkbook("Password Policy")
1786            Get-ADRExcelImport $ADFileName 1
1787        }
1788
1789        $ADFileName = -join($ReportPath,'\','DCs.csv')
1790        If (Test-Path $ADFileName)
1791        {
1792            Get-ADRExcelWorkbook("Domain Controllers")
1793            Get-ADRExcelImport $ADFileName 2
1794        }
1795
1796        $ADFileName = -join($ReportPath,'\','GPOs.csv')
1797        If (Test-Path $ADFileName)
1798        {
1799            Get-ADRExcelWorkbook("Domain GPOs")
1800            Get-ADRExcelImport $ADFileName 2
1801        }
1802
1803        $ADFileName = -join($ReportPath,'\','DNSZones.csv')
1804        If (Test-Path $ADFileName)
1805        {
1806            Get-ADRExcelWorkbook("DNS Zones")
1807            Get-ADRExcelImport $ADFileName 2
1808        }
1809
1810        $ADFileName = -join($ReportPath,'\','Printers.csv')
1811        If (Test-Path $ADFileName)
1812        {
1813            Get-ADRExcelWorkbook("Printers")
1814            Get-ADRExcelImport $ADFileName 2
1815        }
1816
1817        $ADFileName = -join($ReportPath,'\','BitLockerRecoveryKeys.csv')
1818        If (Test-Path $ADFileName)
1819        {
1820            Get-ADRExcelWorkbook("BitLocker")
1821            Get-ADRExcelImport $ADFileName 2
1822        }
1823
1824        $ADFileName = -join($ReportPath,'\','LAPS.csv')
1825        If (Test-Path $ADFileName)
1826        {
1827            Get-ADRExcelWorkbook("LAPS")
1828            Get-ADRExcelImport $ADFileName 2
1829        }
1830
1831        $ADFileName = -join($ReportPath,'\','ComputerSPNs.csv')
1832        If (Test-Path $ADFileName)
1833        {
1834            $CompObj = Import-CSV -Path $ADFileName
1835            $ADCompStat = $CompObj | Sort-Object Name,Service -Unique | Select-Object Name,Service
1836            Remove-Variable CompObj
1837
1838            $ADFileName = -join($ReportPath,'\','ComputerSPNsStats.csv')
1839            $ADCompStat | Export-Csv -Path $ADFileName -NoTypeInformation
1840            Remove-Variable ADCompStat
1841
1842            Get-ADRExcelWorkbook("Computer SPNs")
1843            Get-ADRExcelImport $ADFileName 2
1844        }
1845
1846        $ADFileName = -join($ReportPath,'\','Computers.csv')
1847        If (Test-Path $ADFileName)
1848        {
1849            Get-ADRExcelWorkbook("Computers")
1850            Get-ADRExcelImport $ADFileName 2
1851
1852            $worksheet= $workbook.Worksheets.Item(1)
1853            If ($worksheet.Cells.Item(1,4).text -eq "IPv4Address")
1854            {
1855                [void] $worksheet.Cells.Item(1,4).Addcomment("May not be current.")
1856            }
1857        }
1858
1859        $ADFileName = -join($ReportPath,'\','OUPermissions.csv')
1860        If (Test-Path $ADFileName)
1861        {
1862            $Obj = Import-CSV -Path $ADFileName
1863            $TempObj = $Obj | Select-Object OrganizationalUnit,ObjectTypeName,ActiveDirectoryRights,IdentityReference,AccessControlType,isInherited
1864            Remove-Variable Obj
1865
1866            $ADFileName = -join($ReportPath,'\','OUPermissions1.csv')
1867            $TempObj | Export-Csv -Path $ADFileName -NoTypeInformation
1868            Remove-Variable TempObj
1869
1870            Get-ADRExcelWorkbook("OUPerms")
1871            Get-ADRExcelImport $ADFileName 2
1872
1873            $worksheet= $workbook.Worksheets.Item(1)
1874            $worksheet.Activate();
1875            $worksheet.Application.ActiveWindow.FreezePanes = $isFreeze
1876            $worksheet.Cells.Item(1,6).Interior.ColorIndex = 5
1877            $worksheet.Cells.Item(1,6).font.ColorIndex = 2
1878            # Set Filter to Explicitly Assigned Permissions Only
1879            $worksheet.UsedRange.Select() | Out-Null
1880            $excel.Selection.AutoFilter(6,$true) | Out-Null
1881            $worksheet.Range("A1").Select() | Out-Null
1882        }
1883
1884        $ADFileName = -join($ReportPath,'\','OUs.csv')
1885        If (Test-Path $ADFileName)
1886        {
1887            Get-ADRExcelWorkbook("OUs")
1888            Get-ADRExcelImport $ADFileName 2
1889        }
1890
1891        $ADFileName = -join($ReportPath,'\','UserSPNs.csv')
1892        If (Test-Path $ADFileName)
1893        {
1894            Get-ADRExcelWorkbook("User SPNs")
1895            Get-ADRExcelImport $ADFileName 2
1896        }
1897
1898        $ADFileName = -join($ReportPath,'\','Groups.csv')
1899        If (Test-Path $ADFileName)
1900        {
1901            Get-ADRExcelWorkbook("Groups")
1902            Get-ADRExcelImport $ADFileName 2
1903        }
1904
1905        $ADFileName = -join($ReportPath,'\','GroupMembers.csv')
1906        If (Test-Path $ADFileName)
1907        {
1908            Get-ADRExcelWorkbook("Group Members")
1909            Get-ADRExcelImport $ADFileName 2
1910            $filter = "Account Operators","Administrators","Backup Operators","Cert Publishers","Crypto Operators","Dns Admins","Domain Admins","Enterprise Admins","Incoming Forest Trust Builders","Network Operators","Print Operators","Schema Admins","Server Operators","Enterprise Key Admins","Key Admins"
1911            $xlFilterValues = 7
1912            $worksheet= $workbook.Worksheets.Item(1)
1913            $worksheet.Cells.Item(1,1).Interior.ColorIndex = 5
1914            $worksheet.Cells.Item(1,1).font.ColorIndex = 2
1915            $worksheet.UsedRange.AutoFilter(1,$filter,$xlFilterValues) | Out-Null
1916        }
1917
1918        $ADFileName = -join($ReportPath,'\','Users.csv')
1919        If (Test-Path $ADFileName)
1920        {
1921            Get-ADRExcelWorkbook("Users")
1922            Get-ADRExcelImport $ADFileName 2
1923
1924            $worksheet= $workbook.Worksheets.Item(1)
1925            $worksheet.Activate();
1926            $worksheet.Application.ActiveWindow.FreezePanes = $isFreeze
1927            $worksheet.Cells.Item(1,3).Interior.ColorIndex = 5
1928            $worksheet.Cells.Item(1,3).font.ColorIndex = 2
1929            # Set Filter to Enabled Accounts only
1930            $worksheet.UsedRange.Select() | Out-Null
1931            $excel.Selection.AutoFilter(3,$true) | Out-Null
1932            $worksheet.Range("A1").Select() | Out-Null
1933        }
1934
1935        $ADFileName = -join($ReportPath,'\','Computers.csv')
1936        If (Test-Path $ADFileName)
1937        {
1938            $CompObj = Import-CSV -Path $ADFileName
1939            $ADCompStat = $CompObj | Select-Object OperatingSystem | Group-Object -Property OperatingSystem | Sort-Object -property @{Expression="Count";Descending=$true}
1940            Remove-Variable CompObj
1941
1942            Get-ADRExcelWorkbook("Computer Stats")
1943            $worksheet= $workbook.Worksheets.Item(1)
1944
1945            $row = 1
1946            $column = 1
1947            "Operating System","Count" | ForEach-Object {
1948                $worksheet.Cells.Item($row,$column)=$_
1949                $column++
1950            }
1951            $column = 1
1952            $row = 2
1953            $ADCompStat | ForEach-Object {
1954                $worksheet.Cells.Item($row,$column) = $_.Name
1955                $column++
1956                $worksheet.Cells.Item($row,$column) = $_.Count
1957                $column=1
1958                $row++
1959            }
1960            Remove-Variable ADCompStat
1961            $listObject = $worksheet.ListObjects.Add([Microsoft.Office.Interop.Excel.XlListObjectSourceType]::xlSrcRange, $worksheet.UsedRange, $null, [Microsoft.Office.Interop.Excel.XlYesNoGuess]::xlYes, $null)
1962            $listObject.TableStyle = "TableStyleLight2" # Style Cheat Sheet: https://msdn.microsoft.com/en-au/library/documentformat.openxml.spreadsheet.tablestyle.aspx
1963            $usedRange = $worksheet.UsedRange
1964            $usedRange.EntireColumn.AutoFit() | Out-Null
1965
1966            #Add Pie Chart
1967            #Get-ADRExcelChart $ChartType $ChartLayout $ChartTitle $RangetoCover $chardata
1968            Get-ADRExcelChart 51 10 "Operating Systems in AD" "D2:S16" $null
1969        }
1970
1971        $ADFileName = -join($ReportPath,'\','ComputerSPNsStats.csv')
1972        If (Test-Path $ADFileName)
1973        {
1974            $CompObj = Import-CSV -Path $ADFileName
1975            $ADCompStat = $CompObj | Group-Object -Property Service | Sort-Object -Property @{Expression="Count";Descendin=$true}
1976            Remove-Variable CompObj
1977
1978            Get-ADRExcelWorkbook("Computer Role Stats")
1979            $worksheet= $workbook.Worksheets.Item(1)
1980
1981            $row = 1
1982            $column = 1
1983            "Computer Role","Count" | ForEach-Object {
1984                $worksheet.Cells.Item($row,$column)=$_
1985                $column++
1986            }
1987            $column = 1
1988            $row = 2
1989            $ADCompStat | ForEach-Object {
1990                $worksheet.Cells.Item($row,$column) = $_.Name
1991                $column++
1992                $worksheet.Cells.Item($row,$column) = $_.Count
1993                $column=1
1994                $row++
1995            }
1996            Remove-Variable ADCompStat
1997            $listObject = $worksheet.ListObjects.Add([Microsoft.Office.Interop.Excel.XlListObjectSourceType]::xlSrcRange, $worksheet.UsedRange, $null, [Microsoft.Office.Interop.Excel.XlYesNoGuess]::xlYes, $null)
1998            $listObject.TableStyle = "TableStyleLight2" # Style Cheat Sheet: https://msdn.microsoft.com/en-au/library/documentformat.openxml.spreadsheet.tablestyle.aspx
1999            $usedRange = $worksheet.UsedRange
2000            $usedRange.EntireColumn.AutoFit() | Out-Null
2001
2002            #Add Pie Chart
2003            #Get-ADRExcelChart $ChartType $ChartLayout $ChartTitle $RangetoCover $chardata
2004            Get-ADRExcelChart 51 10 "Computer Roles in AD" "D2:U16" $null
2005        }
2006
2007        $ADFileName = -join($ReportPath,'\','GroupMembers.csv')
2008        If (Test-Path $ADFileName)
2009        {
2010            $GroupObj = Import-CSV -Path $ADFileName
2011            $ADGroupStat = $GroupObj | Where-Object {$_.'AccountType' -eq 'user'} | Select-Object 'Group Name' | Group-Object -Property 'Group Name' | Sort-Object -property @{Expression="Count";Descending=$true}
2012            Remove-Variable GroupObj
2013
2014            Get-ADRExcelWorkbook("Privileged User Group Stats")
2015            $worksheet= $workbook.Worksheets.Item(1)
2016            $row = 1
2017            $column = 1
2018            $worksheet.Cells.Item($row,$column).Interior.ColorIndex = 5
2019            $worksheet.Cells.Item($row,$column).font.ColorIndex = 2
2020            "Group Name","User Count (Not-Recursive)" | ForEach-Object {
2021                $worksheet.Cells.Item($row,$column)=$_
2022                $column++
2023            }
2024            $column = 1
2025            $row = 2
2026            $ADGroupStat | ForEach-Object {
2027                $worksheet.Cells.Item($row,$column) = $_.Name
2028                $column++
2029                $worksheet.Cells.Item($row,$column) = $_.Count
2030                $column=1
2031                $row++
2032            }
2033            Remove-Variable ADGroupStat
2034
2035            $filter = "Account Operators","Administrators","Backup Operators","Cert Publishers","Crypto Operators","Dns Admins","Domain Admins","Enterprise Admins","Incoming Forest Trust Builders","Network Operators","Print Operators","Schema Admins","Server Operators","Enterprise Key Admins","Key Admins"
2036            $xlFilterValues = 7
2037            $worksheet= $workbook.Worksheets.Item(1)
2038            $worksheet.UsedRange.AutoFilter(1,$filter,$xlFilterValues) | Out-Null
2039
2040            $listObject = $worksheet.ListObjects.Add([Microsoft.Office.Interop.Excel.XlListObjectSourceType]::xlSrcRange, $worksheet.UsedRange, $null, [Microsoft.Office.Interop.Excel.XlYesNoGuess]::xlYes, $null)
2041            $listObject.TableStyle = "TableStyleLight2" # Style Cheat Sheet: https://msdn.microsoft.com/en-au/library/documentformat.openxml.spreadsheet.tablestyle.aspx
2042            $usedRange = $worksheet.UsedRange
2043            $usedRange.EntireColumn.AutoFit() | Out-Null
2044
2045            #Get-ADRExcelChart $ChartType $ChartLayout $ChartTitle $RangetoCover $chardata
2046            Get-ADRExcelChart 51 10 "Privileged Groups in AD" "D2:P16" $null
2047        }
2048
2049        $ADFileName = -join($ReportPath,'\','Users.csv')
2050        If (Test-Path $ADFileName)
2051        {
2052            Get-ADRExcelWorkbook("User Stats")
2053            $worksheet= $workbook.Worksheets.Item(1)
2054
2055            $ADTemp = Import-Csv -Path $ADFileName
2056
2057            $row = 1
2058            $column = 1
2059            $worksheet.Cells.Item($row, $column) = "User Accounts in AD"
2060            $worksheet.Cells.Item($row,$column).Style = "Heading 2"
2061            $worksheet.Cells.Item($row,$column).HorizontalAlignment = -4108
2062            $MergeCells = $worksheet.Range("A1:C1")
2063            $MergeCells.Select() | Out-Null
2064            $MergeCells.MergeCells = $true
2065            Remove-Variable MergeCells
2066
2067            $row++
2068            $worksheet.Cells.Item($row, $column) = "Type"
2069            $worksheet.Cells.Item($row, $column).Font.Bold=$True
2070            $worksheet.Cells.Item($row, $column+1) = "Count"
2071            $worksheet.Cells.Item($row, $column+1).Font.Bold=$True
2072            $worksheet.Cells.Item($row,$column+2) = 'Percentage'
2073            $worksheet.Cells.Item($row, $column+2).Font.Bold=$True
2074
2075            $total = ($ADTemp | Measure-Object | Select-Object -ExpandProperty Count)
2076            $enabled = ($ADTemp | Where-Object ({$_.Enabled -eq $true}) | Measure-Object | Select-Object -ExpandProperty Count)
2077            $disabled = ($ADTemp | Where-Object ({$_.Enabled -eq $false}) | Measure-Object | Select-Object -ExpandProperty Count)
2078
2079            $row++
2080            $worksheet.Cells.Item($row, $column) = "Enabled"
2081            $worksheet.Cells.Item($row, $column+1) = $enabled
2082            $worksheet.Cells.Item($row, $column+2) = "{0:P2}" -f ($enabled/$total)
2083
2084            $row++
2085            $worksheet.Cells.Item($row, $column) = "Disabled"
2086            $worksheet.Cells.Item($row, $column+1) = $disabled
2087            $worksheet.Cells.Item($row, $column+2) = "{0:P2}" -f ($disabled/$total)
2088
2089            $row++
2090            $worksheet.Cells.Item($row, $column) = "Total"
2091            $worksheet.Cells.Item($row, $column+1) = $total
2092            If ($total -ne ($enabled + $disabled))
2093            {
2094                $worksheet.Cells.Item($row, $column+1).Interior.ColorIndex = 3
2095                $worksheet.Cells.Item($row, $column+1).font.ColorIndex = 2
2096                Write-Warning "Enabled + Disabled != Total Users, Try running ADRecon as another user."
2097            }
2098            $worksheet.Cells.Item($row, $column+2) = "{0:P2}" -f ($total/$total)
2099
2100            #Get-ADRExcelChart $ChartType $ChartLayout $ChartTitle $RangetoCover $chardata
2101            Get-ADRExcelChart 5 3 "User Accounts in AD" "A14:D26" $worksheet.Range("A3:A4,B3:B4")
2102
2103            $row = 1
2104            $column = 6
2105            $worksheet.Cells.Item($row, $column) = "Status of User Accounts"
2106            $worksheet.Cells.Item($row,$column).Style = "Heading 2"
2107            $worksheet.Cells.Item($row,$column).HorizontalAlignment = -4108
2108            $MergeCells = $worksheet.Range("F1:J1")
2109            $MergeCells.Select() | Out-Null
2110            $MergeCells.MergeCells = $true
2111            Remove-Variable MergeCells
2112
2113            $row++
2114            $temp = @("Category","Enabled Count","Disabled Count","Enabled Percentage","Disabled Percentage")
2115            $temp | ForEach-Object {
2116                $worksheet.Cells.Item($row, $column) = $_
2117                $worksheet.Cells.Item($row, $column).Font.Bold=$True
2118                $column++
2119            }
2120
2121            $column = 6
2122            $UserProperties = @("Cannot Change Password","Must Change Password at Logon","Password Not Changed after Max Age","Password Never Expires","Password Not Required","Reversibly Encryped Password","Does Not Require Pre Auth","Account Locked Out","Never Logged in",$(($ADTemp | Get-Member -MemberType NoteProperty | Where-Object { $_.Name -like "Dormant*" }).Name))
2123            ForEach ($property in $UserProperties)
2124            {
2125                $row++
2126                $worksheet.Cells.Item($row, $column) = $property
2127                $worksheet.Cells.Item($row, $column+1) = ($ADTemp | Where-Object ({$_.$property -eq $true -and $_.Enabled -eq $true}) | Measure-Object | Select-Object -ExpandProperty Count)
2128                $worksheet.Cells.Item($row, $column+2) = ($ADTemp | Where-Object ({$_.$property -eq $true -and $_.Enabled -eq $false}) | Measure-Object | Select-Object -ExpandProperty Count)
2129                $worksheet.Cells.Item($row, $column+3) = "{0:P2}" -f (([int] $worksheet.Cells.Item($row,$column+1).text)/$total)
2130                $worksheet.Cells.Item($row, $column+4) = "{0:P2}" -f (([int] $worksheet.Cells.Item($row,$column+2).text)/$total)
2131            }
2132
2133            #Get-ADRExcelChart $ChartType $ChartLayout $ChartTitle $RangetoCover $chardata
2134            Get-ADRExcelChart 51 5 "Status of User Accounts" "F14:J36" $worksheet.Range("F2:F12,G2:H12")
2135
2136            Remove-Variable ADTemp
2137            $usedRange = $worksheet.UsedRange
2138            $usedRange.EntireColumn.AutoFit() | Out-Null
2139        }
2140
2141        # Create Table of Contents
2142
2143        Get-ADRExcelWorkbook("Table of Contents")
2144        $worksheet= $workbook.Worksheets.Item(1)
2145
2146        # Image format and properties
2147        # $path = "C:\SOS_Logo.jpg"
2148        # $base64sos = [convert]::ToBase64String((Get-Content $path -Encoding byte))
2149
2150        $base64sos = "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"
2151
2152        $bytes = [System.Convert]::FromBase64String($base64sos)
2153        Remove-Variable base64sos
2154
2155        $CompanyLogo = -join($ReportPath,'\','SOS_Logo.jpg')
2156		$p = New-Object IO.MemoryStream($bytes, 0, $bytes.length)
2157		$p.Write($bytes, 0, $bytes.length)
2158        Add-Type -AssemblyName System.Drawing
2159		$picture = [System.Drawing.Image]::FromStream($p, $true)
2160		$picture.Save($CompanyLogo)
2161
2162        Remove-Variable bytes
2163        Remove-Variable p
2164        Remove-Variable picture
2165
2166        $LinkToFile = $false
2167        $SaveWithDocument = $true
2168        $Left = 0
2169        $Top = 0
2170        $Width = 135
2171        $Height = 50
2172
2173        # Add image to the Sheet
2174        $worksheet.Shapes.AddPicture($CompanyLogo, $LinkToFile, $SaveWithDocument, $Left, $Top, $Width, $Height) | Out-Null
2175
2176        Remove-Variable LinkToFile
2177        Remove-Variable SaveWithDocument
2178        Remove-Variable Left
2179        Remove-Variable Top
2180        Remove-Variable Width
2181        Remove-Variable Height
2182
2183        $row = 5
2184        $column = 1
2185        $worksheet.Cells.Item($row,$column)= "Table of Contents"
2186        $worksheet.Cells.Item($row,$column).Style = "Heading 2"
2187        $row++
2188
2189        For($i=2; $i -le $workbook.Worksheets.Count; $i++)
2190        {
2191            $workbook.Worksheets.Item(1).Hyperlinks.Add($workbook.Worksheets.Item(1).Cells.Item($row,$column) , "" , "'$($workbook.Worksheets.Item($i).Name)'!A1", "", $workbook.Worksheets.Item($i).Name) | Out-Null
2192            $row++
2193        }
2194
2195        $row++
2196        $worksheet.Cells.Item($row, 1) = "É Sense of Security 2017"
2197        $workbook.Worksheets.Item(1).Hyperlinks.Add($workbook.Worksheets.Item(1).Cells.Item($row,2) , "https://www.senseofsecurity.com.au", "" , "", "www.senseofsecurity.com.au") | Out-Null
2198
2199        $usedRange = $worksheet.UsedRange
2200        $usedRange.EntireColumn.AutoFit() | Out-Null
2201
2202        $excel.Windows.Item(1).Displaygridlines=$false
2203
2204        $ADStatFileName = -join($ExcelPath,'\',$DomainName,'ADRecon-Report','.xlsx')
2205        Try
2206        {
2207            # Disable prompt if file exists
2208            $excel.DisplayAlerts = $False
2209            $workbook.SaveAs($ADStatFileName)
2210            Write-Output "[+] Excelsheet Saved to: $ADStatFileName"
2211        }
2212        Catch
2213        {
2214            Write-Output "[EXCEPTION] $($_.Exception.Message)"
2215        }
2216        [gc]::Collect()
2217        [gc]::WaitForPendingFinalizers()
2218        $excel.Quit()
2219        [System.Runtime.InteropServices.Marshal]::ReleaseComObject([System.__ComObject] $excel) | Out-Null
2220    }
2221}
2222
2223Function Get-ADRLogin
2224{
2225    param (
2226        [Parameter(Mandatory = $true)]
2227        [string] $Protocol,
2228
2229        [Parameter(Mandatory = $true)]
2230        [bool] $UseAltCreds = $false,
2231
2232        [Parameter(Mandatory = $true)]
2233        [array] $Collect,
2234
2235        [Parameter(Mandatory = $true)]
2236        [string] $computerrole,
2237
2238        [Parameter(Mandatory = $true)]
2239        [string] $ADReconVersion,
2240
2241        [Parameter(Mandatory = $false)]
2242        [string] $DCIP,
2243
2244        [Parameter(Mandatory = $false)]
2245        [Management.Automation.PSCredential] $creds = [Management.Automation.PSCredential]::Empty,
2246
2247        [Parameter(Mandatory = $true)]
2248        [int] $DormantTimeSpan = 90,
2249
2250        [Parameter(Mandatory = $true)]
2251        [int] $PageSize = 200,
2252
2253        [Parameter(Mandatory = $true)]
2254        [int] $Threads = 10,
2255
2256        [Parameter(Mandatory = $true)]
2257        [int] $FlushCount = -1
2258    )
2259
2260    Switch ($Collect)
2261    {
2262        'Forest' { $ADRForest = $true }
2263        'Domain' {$ADRDomain = $true }
2264        'PasswordPolicy' { $ADRPasswordPolicy = $true }
2265        'DCs' { $ADRDCs = $true }
2266        'Users' { $ADRUsers = $true }
2267        'UserSPNs' { $ADRUserSPNs = $true }
2268        'Groups' { $ADRGroups = $true }
2269        'GroupMembers' { $ADRGroupMembers = $true }
2270        'OUs' { $ADROUs = $true }
2271        'OUPermissions' { $ADROUPermissions = $true }
2272        'GPOs' { $ADRGPOs = $true }
2273        'DNSZones' { $ADRDNSZones = $true }
2274        'Printers' { $ADRPrinters = $true }
2275        'Computers' { $ADRComputers = $true }
2276        'ComputerSPNs' { $ADRCopmuterSPNs = $true }
2277        'BitLocker' { $ADRBitLocker = $true }
2278        'LAPS' { $ADRLAPS = $true }
2279        'Default'
2280        {
2281            $ADRForest = $true
2282            $ADRDomain = $true
2283            $ADRPasswordPolicy = $true
2284            $ADRDCs = $true
2285            $ADRUsers = $true
2286            $ADRUserSPNs = $true
2287            $ADRGroups = $true
2288            $ADRGroupMembers = $true
2289            $ADROUs = $true
2290            $ADROUPermissions = $true
2291            $ADRGPOs = $true
2292            $ADRDNSZones = $true
2293            $ADRPrinters = $true
2294            $ADRComputers = $true
2295            $ADRCopmuterSPNs = $true
2296            $ADRLAPS = $true
2297            $ADRBitLocker = $true
2298        }
2299    }
2300
2301    $returndir = Get-Location
2302    $date = Get-Date
2303
2304    If ($UseAltCreds -and ($Protocol -eq 'ADWS'))
2305    {
2306        If (!(Test-Path ADR:))
2307        {
2308            Try
2309            {
2310                New-PSDrive -PSProvider ActiveDirectory -Name ADR -Root "" -Server $DCIP -Credential $creds -ErrorAction Stop | Out-Null
2311            }
2312            Catch
2313            {
2314                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2315                Return $null
2316            }
2317        }
2318        Else
2319        {
2320            Remove-PSDrive ADR
2321            Try
2322            {
2323                New-PSDrive -PSProvider ActiveDirectory -Name ADR -Root "" -Server $DCIP -Credential $creds -ErrorAction Stop | Out-Null
2324            }
2325            Catch
2326            {
2327                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2328                Return $null
2329            }
2330        }
2331        Set-Location ADR:
2332    }
2333
2334    If ($Protocol -eq 'LDAP')
2335    {
2336        If ($UseAltCreds)
2337        {
2338            Try
2339            {
2340                $objDomain = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($DCIP)", $creds.UserName,$creds.GetNetworkCredential().Password
2341                $objDomainRootDSE = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($DCIP)/RootDSE", $creds.UserName,$creds.GetNetworkCredential().Password
2342            }
2343            Catch
2344            {
2345                Write-Output "[ERROR] $($_.Exception.Message)"
2346                Return $null
2347            }
2348            If(!($objDomain.name))
2349            {
2350                Write-Output "[ERROR] LDAP bind Unsuccessful"
2351                Return $null
2352            }
2353            Else
2354            {
2355                Write-Output "[*] LDAP bind Successful"
2356            }
2357        }
2358        Else
2359        {
2360            $objDomain = [ADSI]""
2361            $objDomainRootDSE = ([ADSI] "LDAP://RootDSE")
2362            If(!($objDomain.name))
2363            {
2364                Write-Output "[ERROR] LDAP bind Unsuccessful"
2365                Return $null
2366            }
2367        }
2368    }
2369    $ExcelPath =  -join($returndir,'\','ADRecon-Report-',$date.day,$date.Month,$date.Year,$date.Hour,$date.Minute,$date.Second)
2370    New-Item $ExcelPath -type directory | Out-Null
2371    $ReportPath = [System.IO.DirectoryInfo] -join($ExcelPath,'\','CSV-Files')
2372    New-Item $ReportPath -type directory | Out-Null
2373
2374    If (!(Test-Path $ExcelPath))
2375    {
2376        Write-Output "[ERROR] Could not create output directory"
2377        return $null
2378    }
2379
2380    Write-Output "[*] Commencing - $date"
2381    If ($ADRDomain) { Get-ADRADDomain $Protocol $UseAltCreds $ReportPath $objDomain $objDomainRootDSE $DCIP $creds }
2382    If ($ADRForest) { Get-ADRADForest $Protocol $UseAltCreds $ReportPath $objDomain $objDomainRootDSE $DCIP $creds }
2383    If ($ADRPasswordPolicy) { Get-ADRADPassPol $Protocol $UseAltCreds $ReportPath $objDomain }
2384    If ($ADRDCs) { Get-ADRADDC $Protocol $UseAltCreds $ReportPath $objDomain }
2385    If ($ADRUsers) { Get-ADRADUser $Protocol $UseAltCreds $ReportPath $date $objDomain $DormantTimeSpan $PageSize $Threads $FlushCount }
2386    If ($ADRUserSPNs) { Get-ADRADUserSPN $Protocol $UseAltCreds $ReportPath $objDomain $PageSize $Threads $FlushCount }
2387    If ($ADRGroups) { Get-ADRADGroup $Protocol $UseAltCreds $ReportPath $objDomain $PageSize $Threads $FlushCount }
2388    If ($ADRGroupMembers) { Get-ADRADGroupMember $Protocol $UseAltCreds $ReportPath $objDomain $PageSize $Threads $FlushCount }
2389    If ($ADROUs) { Get-ADRADOU $Protocol $UseAltCreds $ReportPath $objDomain $PageSize }
2390    If ($ADROUPermissions) { Get-ADRADOUPermission $Protocol $UseAltCreds $ReportPath $objDomain $DCIP $creds $PageSize }
2391    If ($ADRGPOs) { Get-ADRADGPO $Protocol $UseAltCreds $ReportPath $objDomain $PageSize }
2392    If ($ADRDNSZones) { Get-ADRADDNSZone $Protocol $UseAltCreds $ReportPath $objDomain $DCIP $creds $PageSize }
2393    If ($ADRPrinters) { Get-ADRADPrinter $Protocol $UseAltCreds $ReportPath $objDomain $PageSize }
2394    If ($ADRComputers) { Get-ADRADComputer $Protocol $UseAltCreds $ReportPath $date $objDomain $PageSize $Threads $FlushCount }
2395    If ($ADRCopmuterSPNs) { Get-ADRADComputerSPN $Protocol $UseAltCreds $ReportPath $objDomain $PageSize $Threads $FlushCount }
2396    If ($ADRLAPS) { Get-ADRADLAPSCheck $Protocol $UseAltCreds $ReportPath $objDomain $PageSize }
2397    If ($ADRBitLocker) { Get-ADRADBitLocker $Protocol $UseAltCreds $ReportPath $objDomain }
2398
2399    $AboutADRecon = New-Object PSObject
2400    $AboutADRecon | Add-Member -MemberType NoteProperty -Name "Category" -Value "Value"
2401    $AboutADRecon | Add-Member -MemberType NoteProperty -Name "Date" -Value $($date)
2402    $AboutADRecon | Add-Member -MemberType NoteProperty -Name "ADRecon" -Value "https://github.com/sense-of-security/ADRecon"
2403    If ($Protocol -eq 'ADWS')
2404    {
2405        $AboutADRecon | Add-Member -MemberType NoteProperty -Name "RSAT Version" -Value $($ADReconVersion)
2406    }
2407    Else
2408    {
2409        $AboutADRecon | Add-Member -MemberType NoteProperty -Name "LDAP Version" -Value $($ADReconVersion)
2410    }
2411    If ($UseAltCreds)
2412    {
2413        $AboutADRecon | Add-Member -MemberType NoteProperty -Name "Ran as user" -Value $($creds.UserName)
2414    }
2415    Else
2416    {
2417        $AboutADRecon | Add-Member -MemberType NoteProperty -Name "Ran as user" -Value $([Environment]::UserName)
2418    }
2419    $AboutADRecon | Add-Member -MemberType NoteProperty -Name "Ran from" -Value $([Environment]::MachineName)
2420    $AboutADRecon | Add-Member -MemberType NoteProperty -Name "Computer Role" -Value $($computerrole)
2421    $TotalTime = "{0:N2}" -f ((Get-DayDiff (Get-Date) $date).TotalMinutes)
2422    $AboutADRecon | Add-Member -MemberType NoteProperty -Name "Execution Time (mins)" -Value $($TotalTime)
2423
2424    Write-Verbose "[+] AboutADRecon"
2425    If ($AboutADRecon)
2426    {
2427        $ADFileName = -join($ReportPath,'\','AboutADRecon','.csv')
2428        Try
2429        {
2430            $AboutADRecon | Export-Csv -Path $ADFileName -NoTypeInformation
2431        }
2432        Catch
2433        {
2434            Write-Output "[ERROR] Failed to Export CSV File"
2435            Write-Output "[EXCEPTION] $($_.Exception.Message)"
2436        }
2437        Remove-Variable AboutADRecon
2438        Remove-Variable ADFileName
2439    }
2440
2441    Write-Output "[*] Total Execution Time (mins): $($TotalTime)"
2442    Remove-Variable TotalTime
2443    Get-ADRGenExcel($ExcelPath)
2444
2445    Write-Output "[*] Completed."
2446    Write-Output "[*] Output Directory: $ExcelPath"
2447
2448    Set-Location $returndir
2449    Remove-Variable returndir
2450
2451    If (($Protocol -eq 'ADWS') -and $UseAltCreds)
2452    {
2453        Remove-PSDrive ADR
2454    }
2455
2456    If ($Protocol -eq 'LDAP')
2457    {
2458        $objDomain.Dispose()
2459        $objDomainRootDSE.Dispose()
2460    }
2461
2462}
2463
2464Function Get-ADRADDomain
2465{
2466    param(
2467        [Parameter(Mandatory = $true)]
2468        [string] $Protocol,
2469
2470        [Parameter(Mandatory = $true)]
2471        [bool] $UseAltCreds,
2472
2473        [Parameter(Mandatory = $true)]
2474        [string] $ReportPath,
2475
2476        [Parameter(Mandatory = $false)]
2477        [DirectoryServices.DirectoryEntry] $objDomain,
2478
2479        [Parameter(Mandatory = $false)]
2480        [DirectoryServices.DirectoryEntry] $objDomainRootDSE,
2481
2482        [Parameter(Mandatory = $false)]
2483        [string] $DCIP,
2484
2485        [Parameter(Mandatory = $false)]
2486        [Management.Automation.PSCredential] $creds = [Management.Automation.PSCredential]::Empty
2487    )
2488
2489    Write-Output "[-] Domain"
2490    If ($Protocol -eq 'ADWS')
2491    {
2492        Try
2493        {
2494            $ADDomain = Get-ADDomain
2495        }
2496        Catch
2497        {
2498            Write-Output "[EXCEPTION] $($_.Exception.Message)"
2499            Return $null
2500        }
2501        If ($ADDomain)
2502        {
2503            $ADDomainObj = New-Object PSObject
2504            $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Category" -Value "Value"
2505            $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Name" -Value $ADDomain.DNSRoot
2506            $ADDomainObj | Add-Member -MemberType NoteProperty -Name "NetBIOS" -Value $ADDomain.NetBIOSName
2507            # Values taken from https://technet.microsoft.com/en-us/library/hh852281(v=wps.630).aspx
2508            $FLAD = @{
2509	            0 = "Windows2000";
2510	            1 = "Windows2003/Interim";
2511	            2 = "Windows2003";
2512	            3 = "Windows2008";
2513	            4 = "Windows2008R2";
2514	            5 = "Windows2012";
2515	            6 = "Windows2012R2";
2516	            7 = "Windows2016"
2517            }
2518            $DomainMode = $FLAD[[convert]::ToInt32($ADDomain.DomainMode)] + "Domain"
2519            Remove-Variable FLAD
2520            If ($DomainMode)
2521            {
2522                $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Functional Level" -Value $DomainMode
2523                Remove-Variable DomainMode
2524            }
2525            Else
2526            {
2527                $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Functional Level" -Value $ADDomain.DomainMode
2528            }
2529            $ADDomainObj | Add-Member -MemberType NoteProperty -Name "DomainSID "-Value $ADDomain.DomainSID.Value
2530            For($i=0; $i -lt $ADDomain.ReplicaDirectoryServers.Count; $i++)
2531            {
2532                $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Domain Controller -$i" -Value $ADDomain.ReplicaDirectoryServers[$i]
2533            }
2534            For($i=0; $i -lt $ADDomain.ReadOnlyReplicaDirectoryServers.Count; $i++)
2535            {
2536                $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Read Only Domain Controller -$i" -Value $ADDomain.ReadOnlyReplicaDirectoryServers[$i]
2537            }
2538
2539            Try
2540            {
2541                $ADForest = Get-ADForest $ADDomain.Forest
2542            }
2543            Catch
2544            {
2545                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2546            }
2547
2548            If (-Not $ADForest)
2549            {
2550                Try
2551                {
2552                    $ADForest = Get-ADForest -Server $DCIP
2553                }
2554                Catch
2555                {
2556                    Write-Output "[EXCEPTION] $($_.Exception.Message)"
2557                }
2558            }
2559            If ($ADForest)
2560            {
2561                $DomainCreation = Get-ADObject -SearchBase "$($ADForest.PartitionsContainer)" -LDAPFilter "(&(objectClass=crossRef)(systemFlags=3)(Name=$($ADDomain.Name)))" -Property whenCreated
2562                Remove-Variable ADForest
2563            }
2564            # Get RIDAvailablePool
2565            Try
2566            {
2567                $RIDManager = Get-ADObject -Identity "CN=RID Manager$,CN=System,$($ADDomain.DistinguishedName)" -Property rIDAvailablePool
2568                $RIDproperty = $RIDManager.rIDAvailablePool
2569                [int32] $totalSIDS = $($RIDproperty) / ([math]::Pow(2,32))
2570                [int64] $temp64val = $totalSIDS * ([math]::Pow(2,32))
2571                $RIDsIssued = [int32]($($RIDproperty) - $temp64val)
2572                $RIDsRemaining = $totalSIDS - $RIDsIssued
2573                Remove-Variable RIDManager
2574                Remove-Variable RIDproperty
2575                Remove-Variable totalSIDS
2576                Remove-Variable temp64val
2577            }
2578            Catch
2579            {
2580                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2581            }
2582            If ($DomainCreation)
2583            {
2584                $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Creation Date" -Value $DomainCreation.whenCreated
2585                Remove-Variable DomainCreation
2586            }
2587            If ($RIDsIssued)
2588            {
2589                $ADDomainObj | Add-Member -MemberType NoteProperty -Name "RIDs Issued" -Value $RIDsIssued
2590                Remove-Variable RIDsIssued
2591            }
2592            If ($RIDsRemaining)
2593            {
2594                $ADDomainObj | Add-Member -MemberType NoteProperty -Name "RIDs Remaining" -Value $RIDsRemaining
2595                Remove-Variable RIDsRemaining
2596            }
2597        }
2598    }
2599
2600    If ($Protocol -eq 'LDAP')
2601    {
2602        If ($UseAltCreds)
2603        {
2604            $DomainFQDN = Get-DNtoFQDN($objDomain.distinguishedName)
2605            $DomainContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext("Domain",$($DomainFQDN),$($creds.UserName),$($creds.GetNetworkCredential().password))
2606            Try
2607            {
2608                $ADDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetDomain($DomainContext)
2609            }
2610            Catch
2611            {
2612                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2613                Return $null
2614            }
2615            Remove-Variable DomainContext
2616            # Get RIDAvailablePool
2617            $SearchPath = "CN=RID Manager$,CN=System"
2618            $objSearchPath = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($DCIP)/$SearchPath,$($objDomain.distinguishedName)", $creds.UserName,$creds.GetNetworkCredential().Password
2619            $objSearcherPath = New-Object System.DirectoryServices.DirectorySearcher $objSearchPath
2620            $objSearcherPath.PropertiesToLoad.AddRange(("ridavailablepool"))
2621            $objSearcherPath.CacheResults = $False
2622            $objSearcherResult = $objSearcherPath.FindAll()
2623            $RIDproperty = $objSearcherResult.Properties.ridavailablepool
2624            [int32] $totalSIDS = $($RIDproperty) / ([math]::Pow(2,32))
2625            [int64] $temp64val = $totalSIDS * ([math]::Pow(2,32))
2626            $RIDsIssued = [int32]($($RIDproperty) - $temp64val)
2627            $RIDsRemaining = $totalSIDS - $RIDsIssued
2628            Remove-Variable SearchPath
2629            $objSearchPath.Dispose()
2630            $objSearcherPath.Dispose()
2631            $objSearcherResult.Dispose()
2632            Remove-Variable RIDproperty
2633            Remove-Variable totalSIDS
2634            Remove-Variable temp64val
2635            $ForestContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext("Forest",$($ADDomain.Forest),$($creds.UserName),$($creds.GetNetworkCredential().password))
2636            Try
2637            {
2638                $ADForest = [System.DirectoryServices.ActiveDirectory.Forest]::GetForest($ForestContext)
2639            }
2640            Catch
2641            {
2642                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2643                Return $null
2644            }
2645            Remove-Variable ForestContext
2646
2647            $GlobalCatalog = $ADForest.FindGlobalCatalog()
2648            If ($GlobalCatalog)
2649            {
2650                $DN = "GC://$($GlobalCatalog.IPAddress)/$($objDomain.distinguishedname)"
2651                $ADObject = New-Object -TypeName System.DirectoryServices.DirectoryEntry -ArgumentList ($($DN),$($creds.UserName),$($creds.GetNetworkCredential().password))
2652                $ADDomainSID = New-Object System.Security.Principal.SecurityIdentifier($ADObject.objectSid[0], 0)
2653                $ADObject.Dispose()
2654            }
2655        }
2656        Else
2657        {
2658            $ADDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
2659            $ADForest = [System.DirectoryServices.ActiveDirectory.Forest]::GetCurrentForest()
2660            Try
2661            {
2662                $GlobalCatalog = $ADForest.FindGlobalCatalog()
2663                $DN = "GC://$($GlobalCatalog)/$($objDomain.distinguishedname)"
2664                $ADObject = New-Object -TypeName System.DirectoryServices.DirectoryEntry -ArgumentList ($DN)
2665                $ADDomainSID = New-Object System.Security.Principal.SecurityIdentifier($ADObject.objectSid[0], 0)
2666                $ADObject.dispose()
2667            }
2668            Catch
2669            {
2670                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2671                $ADDomainSID = New-Object System.Security.Principal.SecurityIdentifier($objDomain.objectSid[0], 0)
2672            }
2673            # Get RIDAvailablePool
2674            $RIDManager = ([ADSI]"LDAP://CN=RID Manager$,CN=System,$($objDomain.distinguishedName)")
2675            $RIDproperty = $ObjDomain.ConvertLargeIntegerToInt64($RIDManager.Properties.rIDAvailablePool.value)
2676            [int32] $totalSIDS = $($RIDproperty) / ([math]::Pow(2,32))
2677            [int64] $temp64val = $totalSIDS * ([math]::Pow(2,32))
2678            $RIDsIssued = [int32]($($RIDproperty) - $temp64val)
2679            $RIDsRemaining = $totalSIDS - $RIDsIssued
2680            Remove-Variable RIDManager
2681            Remove-Variable RIDproperty
2682            Remove-Variable totalSIDS
2683            Remove-Variable temp64val
2684        }
2685
2686        If ($ADDomain)
2687        {
2688            $ADDomainObj = New-Object PSObject
2689            $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Category" -Value "Value"
2690            $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Name" -Value $ADDomain.Name
2691            $ADDomainObj | Add-Member -MemberType NoteProperty -Name "NetBIOS" -Value $objDomain.name.value
2692            # Values taken from https://technet.microsoft.com/en-us/library/hh852281(v=wps.630).aspx
2693            $FLAD = @{
2694	            0 = "Windows2000";
2695	            1 = "Windows2003/Interim";
2696	            2 = "Windows2003";
2697	            3 = "Windows2008";
2698	            4 = "Windows2008R2";
2699	            5 = "Windows2012";
2700	            6 = "Windows2012R2";
2701	            7 = "Windows2016"
2702            }
2703            $DomainMode = $FLAD[[convert]::ToInt32($objDomainRootDSE.domainFunctionality,10)] + "Domain"
2704            Remove-Variable FLAD
2705            $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Functional Level" -Value $DomainMode
2706            Remove-Variable DomainMode
2707            $ADDomainObj | Add-Member -MemberType NoteProperty -Name "DomainSID "-Value $ADDomainSID.Value
2708            For($i=0; $i -lt $ADDomain.DomainControllers.Count; $i++)
2709            {
2710                $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Domain Controller -$i" -Value $ADDomain.DomainControllers[$i]
2711            }
2712            $ADDomainObj | Add-Member -MemberType NoteProperty -Name "Creation Date" -Value $objDomain.whencreated.value
2713            If ($RIDsIssued)
2714            {
2715                $ADDomainObj | Add-Member -MemberType NoteProperty -Name "RIDs Issued" -Value $RIDsIssued
2716                Remove-Variable RIDsIssued
2717            }
2718            If ($RIDsRemaining)
2719            {
2720                $ADDomainObj | Add-Member -MemberType NoteProperty -Name "RIDs Remaining" -Value $RIDsRemaining
2721                Remove-Variable RIDsRemaining
2722            }
2723        }
2724    }
2725
2726    If ($ADDomainObj)
2727    {
2728        Write-Verbose "[+] Domain"
2729        $ADFileName  = -join($ReportPath,'\','Domain','.csv')
2730        Try {
2731            $ADDomainObj | Export-Csv -Path $ADFileName -NoTypeInformation
2732        } Catch {
2733            Write-Output "[ERROR] Failed to Export CSV File"
2734            Write-Output "[EXCEPTION] $($_.Exception.Message)"
2735        }
2736        Remove-Variable ADDomainObj
2737        Remove-Variable ADFileName
2738    }
2739}
2740
2741Function Get-ADRADForest
2742{
2743    param(
2744        [Parameter(Mandatory = $true)]
2745        [string] $Protocol,
2746
2747        [Parameter(Mandatory = $true)]
2748        [bool] $UseAltCreds,
2749
2750        [Parameter(Mandatory = $true)]
2751        [string] $ReportPath,
2752
2753        [Parameter(Mandatory = $false)]
2754        [DirectoryServices.DirectoryEntry] $objDomain,
2755
2756        [Parameter(Mandatory = $false)]
2757        [DirectoryServices.DirectoryEntry] $objDomainRootDSE,
2758
2759        [Parameter(Mandatory = $false)]
2760        [string] $DCIP,
2761
2762        [Parameter(Mandatory = $false)]
2763        [Management.Automation.PSCredential] $creds = [Management.Automation.PSCredential]::Empty
2764    )
2765
2766    Write-Output "[-] Forest"
2767    If ($Protocol -eq 'ADWS')
2768    {
2769        Try
2770        {
2771            $ADDomain = Get-ADDomain
2772        }
2773        Catch
2774        {
2775            Write-Output "[EXCEPTION] $($_.Exception.Message)"
2776            Return $null
2777        }
2778
2779        Try
2780        {
2781            $ADForest = Get-ADForest $ADDomain.Forest
2782        }
2783        Catch
2784        {
2785            Write-Output "[EXCEPTION] $($_.Exception.Message)"
2786        }
2787        Remove-Variable ADDomain
2788
2789        If (-Not $ADForest)
2790        {
2791            Try
2792            {
2793                $ADForest = Get-ADForest -Server $DCIP
2794            }
2795            Catch
2796            {
2797                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2798                Return $null
2799            }
2800        }
2801
2802        If ($ADForest)
2803        {
2804            Try
2805            {
2806                $ADRecycleBin = Get-ADOptionalFeature -Filter 'name -like "Recycle Bin Feature"'
2807            }
2808            Catch
2809            {
2810                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2811            }
2812
2813            Try
2814            {
2815                $ADForestCNC = (Get-ADRootDSE).configurationNamingContext
2816                $ADForestDSCP = Get-ADObject -Identity "CN=Directory Service,CN=Windows NT,CN=Services,$($ADForestCNC)" -Partition $ADForestCNC -Properties *
2817                $ADForestTombstoneLifetime = $ADForestDSCP.tombstoneLifetime
2818                Remove-Variable ADForestCNC
2819                Remove-Variable ADForestDSCP
2820            }
2821            Catch
2822            {
2823                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2824            }
2825
2826            $ADForestObj = New-Object PSObject
2827            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Category" -Value "Value"
2828            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Name" -Value $ADForest.Name
2829            # Values taken from https://technet.microsoft.com/en-us/library/hh852281(v=wps.630).aspx
2830            $FLAD = @{
2831                0 = "Windows2000";
2832                1 = "Windows2003/Interim";
2833                2 = "Windows2003";
2834                3 = "Windows2008";
2835                4 = "Windows2008R2";
2836                5 = "Windows2012";
2837                6 = "Windows2012R2";
2838                7 = "Windows2016"
2839            }
2840            $ForestMode = $FLAD[[convert]::ToInt32($ADForest.ForestMode)] + "Forest"
2841            Remove-Variable FLAD
2842            If ($ForestMode)
2843            {
2844                $ADForestObj | Add-Member -MemberType NoteProperty -Name "Functional Level" -Value $ForestMode
2845                Remove-Variable ForestMode
2846            }
2847            Else
2848            {
2849                $ADForestObj | Add-Member -MemberType NoteProperty -Name "Functional Level" -Value $ADForest.ForestMode
2850            }
2851            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Domain Naming Master" -Value $ADForest.DomainNamingMaster
2852            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Schema Master" -Value $ADForest.SchemaMaster
2853            $ADForestObj | Add-Member -MemberType NoteProperty -Name "RootDomain" -Value $ADForest.RootDomain
2854            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Domain Count" -Value $ADForest.Domains.Count
2855            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Site Count" -Value $ADForest.Sites.Count
2856            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Global Catalog Count" -Value $ADForest.GlobalCatalogs.Count
2857            For($i=0; $i -lt $ADForest.Domains.Count; $i++)
2858            {
2859                $ADForestObj | Add-Member -MemberType NoteProperty -Name "Domain -$i" -Value $ADForest.Domains[$i]
2860            }
2861            For($i=0; $i -lt $ADForest.Sites.Count; $i++)
2862            {
2863                $ADForestObj | Add-Member -MemberType NoteProperty -Name "Site -$i" -Value $ADForest.Sites[$i]
2864            }
2865            For($i=0; $i -lt $ADForest.GlobalCatalogs.Count; $i++)
2866            {
2867                $ADForestObj | Add-Member -MemberType NoteProperty -Name "GlobalCatalog -$i" -Value $ADForest.GlobalCatalogs[$i]
2868            }
2869            Remove-Variable ADForest
2870            If ($ADRecycleBin)
2871            {
2872                If ($ADRecycleBin.EnabledScopes.Count -eq 0)
2873                {
2874                    $ADForestObj | Add-Member -MemberType NoteProperty -Name "Recycle Bin Enabled" -Value $false
2875                }
2876                Else
2877                {
2878                    $ADForestObj | Add-Member -MemberType NoteProperty -Name "Recycle Bin Enabled" -Value $true
2879                }
2880                Remove-Variable ADRecycleBin
2881            }
2882            If ($ADForestTombstoneLifetime)
2883            {
2884                $ADForestObj | Add-Member -MemberType NoteProperty -Name "Tombstone Lifetime" -Value $ADForestTombstoneLifetime
2885                Remove-Variable ADForestTombstoneLifetime
2886            }
2887            Else
2888            {
2889                $ADForestObj | Add-Member -MemberType NoteProperty -Name "Tombstone Lifetime" -Value "Not Retrieved"
2890            }
2891        }
2892    }
2893
2894    If ($Protocol -eq 'LDAP')
2895    {
2896        If ($UseAltCreds)
2897        {
2898            $DomainFQDN = Get-DNtoFQDN($objDomain.distinguishedName)
2899            $DomainContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext("Domain",$($DomainFQDN),$($creds.UserName),$($creds.GetNetworkCredential().password))
2900            Try
2901            {
2902                $ADDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetDomain($DomainContext)
2903            }
2904            Catch
2905            {
2906                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2907                Return $null
2908            }
2909            Remove-Variable DomainContext
2910
2911            $ForestContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext("Forest",$($ADDomain.Forest),$($creds.UserName),$($creds.GetNetworkCredential().password))
2912            Remove-Variable ADDomain
2913            Try
2914            {
2915                $ADForest = [System.DirectoryServices.ActiveDirectory.Forest]::GetForest($ForestContext)
2916            }
2917            Catch
2918            {
2919                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2920                Return $null
2921            }
2922            Remove-Variable ForestContext
2923
2924            # Check AD Recycle Bin Status
2925            Try
2926            {
2927                $SearchPath = "CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration"
2928                $objSearchPath = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($DCIP)/$($SearchPath),$($objDomain.distinguishedName)", $creds.UserName,$creds.GetNetworkCredential().Password
2929                $objSearcherPath = New-Object System.DirectoryServices.DirectorySearcher $objSearchPath
2930                $objSearcherPath.CacheResults = $False
2931                $ADRecycleBin = $objSearcherPath.FindAll()
2932                Remove-Variable SearchPath
2933                $objSearchPath.Dispose()
2934                $objSearcherPath.Dispose()
2935            }
2936            Catch
2937            {
2938                Write-Output "[EXCEPTION] $($_.Exception.Message)"
2939            }
2940
2941            # Get Tombstone Lifetime
2942            $SearchPath = "CN=Directory Service,CN=Windows NT,CN=Services"
2943            $objSearchPath = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($DCIP)/$SearchPath,$($objDomainRootDSE.configurationNamingContext)", $creds.UserName,$creds.GetNetworkCredential().Password
2944            $objSearcherPath = New-Object System.DirectoryServices.DirectorySearcher $objSearchPath
2945            $objSearcherPath.CacheResults = $False
2946            $objSearcherPath.Filter="(name=Directory Service)"
2947            $objSearcherResult = $objSearcherPath.FindAll()
2948            $ADForestTombstoneLifetime = $objSearcherResult.Properties.tombstoneLifetime
2949            Remove-Variable SearchPath
2950            $objSearchPath.Dispose()
2951            $objSearcherPath.Dispose()
2952            $objSearcherResult.Dispose()
2953
2954        }
2955        Else
2956        {
2957            $ADDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
2958            $ADForest = [System.DirectoryServices.ActiveDirectory.Forest]::GetCurrentForest()
2959
2960            # Check AD Recycle Bin Status
2961            $ADRecycleBin = ([ADSI]"LDAP://CN=Recycle Bin Feature,CN=Optional Features,CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,$($objDomain.distinguishedName)")
2962
2963            # Get Tombstone Lifetime
2964            $ADForestTombstoneLifetime = ([ADSI]"LDAP://CN=Directory Service,CN=Windows NT,CN=Services,$($objDomainRootDSE.configurationNamingContext)").tombstoneLifetime.value
2965
2966        }
2967
2968        # Values taken from https://technet.microsoft.com/en-us/library/hh852281(v=wps.630).aspx
2969        $FLAD = @{
2970	        0 = "Windows2000";
2971	        1 = "Windows2003/Interim";
2972	        2 = "Windows2003";
2973	        3 = "Windows2008";
2974	        4 = "Windows2008R2";
2975	        5 = "Windows2012";
2976	        6 = "Windows2012R2";
2977	        7 = "Windows2016"
2978        }
2979
2980        If ($ADForest)
2981        {
2982            $ADForestObj = New-Object PSObject
2983            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Category" -Value "Value"
2984            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Name" -Value $ADForest.Name
2985            $ForestMode = $FLAD[[convert]::ToInt32($objDomainRootDSE.forestFunctionality,10)] + "Forest"
2986            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Functional Level" -Value $ForestMode
2987            Remove-Variable ForestMode
2988            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Domain Naming Master" -Value $ADForest.NamingRoleOwner
2989            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Schema Master" -Value $ADForest.SchemaRoleOwner
2990            $ADForestObj | Add-Member -MemberType NoteProperty -Name "RootDomain" -Value $ADForest.RootDomain
2991            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Domain Count" -Value $ADForest.Domains.Count
2992            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Site Count" -Value $ADForest.Sites.Count
2993            $ADForestObj | Add-Member -MemberType NoteProperty -Name "Global Catalog Count" -Value $ADForest.GlobalCatalogs.Count
2994            For($i=0; $i -lt $ADForest.Domains.Count; $i++)
2995            {
2996                $ADForestObj | Add-Member -MemberType NoteProperty -Name "Domain -$i" -Value $ADForest.Domains[$i]
2997            }
2998            For($i=0; $i -lt $ADForest.Sites.Count; $i++)
2999            {
3000                $ADForestObj | Add-Member -MemberType NoteProperty -Name "Site -$i" -Value $ADForest.Sites[$i]
3001            }
3002            For($i=0; $i -lt $ADForest.GlobalCatalogs.Count; $i++)
3003            {
3004                $ADForestObj | Add-Member -MemberType NoteProperty -Name "GlobalCatalog -$i" -Value $ADForest.GlobalCatalogs[$i]
3005            }
3006            If ($ADRecycleBin)
3007            {
3008                If ($ADRecycleBin.Properties.EnabledScopes.Count -eq 0)
3009                {
3010                    $ADForestObj | Add-Member -MemberType NoteProperty -Name "Recycle Bin Enabled" -Value $false
3011                }
3012                Else
3013                {
3014                    $ADForestObj | Add-Member -MemberType NoteProperty -Name "Recycle Bin Enabled" -Value $true
3015                }
3016                Remove-Variable ADRecycleBin
3017            }
3018            If ($ADForestTombstoneLifetime)
3019            {
3020                $ADForestObj | Add-Member -MemberType NoteProperty -Name "Tombstone Lifetime" -Value $ADForestTombstoneLifetime
3021                Remove-Variable ADForestTombstoneLifetime
3022            }
3023            Else
3024            {
3025                $ADForestObj | Add-Member -MemberType NoteProperty -Name "Tombstone Lifetime" -Value "Not Retrieved"
3026            }
3027            Remove-Variable ADForest
3028        }
3029    }
3030
3031    If ($ADForestObj)
3032    {
3033        Write-Verbose "[+] Forest"
3034        $ADFileName  = -join($ReportPath,'\','Forest','.csv')
3035        Try
3036        {
3037            $ADForestObj | Export-Csv -Path $ADFileName -NoTypeInformation
3038        }
3039        Catch
3040        {
3041            Write-Output "[ERROR] Failed to Export CSV File"
3042            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3043        }
3044        Remove-Variable ADForestObj
3045        Remove-Variable ADFileName
3046    }
3047}
3048
3049Function Get-ADRADPassPol
3050{
3051    param(
3052        [Parameter(Mandatory = $true)]
3053        [string] $Protocol,
3054
3055        [Parameter(Mandatory = $true)]
3056        [bool] $UseAltCreds,
3057
3058        [Parameter(Mandatory = $true)]
3059        [string] $ReportPath,
3060
3061        [Parameter(Mandatory = $false)]
3062        [DirectoryServices.DirectoryEntry] $objDomain
3063    )
3064
3065    Write-Output "[-] Default Password Policy"
3066    If ($Protocol -eq 'ADWS')
3067    {
3068        Try
3069        {
3070            $ADpasspolicy = Get-ADDefaultDomainPasswordPolicy
3071        }
3072        Catch
3073        {
3074            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3075        }
3076
3077        If ($ADpasspolicy)
3078        {
3079            $ADPassPolObj = New-Object PSObject
3080            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Policy" -Value "Value"
3081            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Enforce password history" -Value $ADpasspolicy.PasswordHistoryCount
3082            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Maximum password age (days)" -Value $ADpasspolicy.MaxPasswordAge.days
3083            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Minimum password age (days)" -Value $ADpasspolicy.MinPasswordAge.days
3084            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Minimum password length" -Value $ADpasspolicy.MinPasswordLength
3085            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Password must meet complexity requirements" -Value $ADpasspolicy.ComplexityEnabled
3086            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Store password using reversible encryption for all users in the domain" -Value $ADpasspolicy.ReversibleEncryptionEnabled
3087            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Account lockout duration (mins)" -Value $ADpasspolicy.LockoutDuration.minutes
3088            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Account lockout threshold" -Value $ADpasspolicy.LockoutThreshold
3089            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Reset account lockout counter after (mins)" -Value $ADpasspolicy.LockoutObservationWindow.minutes
3090            Remove-Variable ADpasspolicy
3091        }
3092
3093        Write-Output "[-] Fine Grained Password Policy - May need a Privileged Account"
3094        Try
3095        {
3096            $ADFinepasspolicy = Get-ADFineGrainedPasswordPolicy -Filter *
3097        }
3098        Catch
3099        {
3100            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3101        }
3102
3103        If ($ADFinepasspolicy)
3104        {
3105            $i = 0
3106            $ADFinepasspolicy | ForEach-Object {
3107                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Name -$i" -Value $($_.Name)
3108                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Applies To -$i" -Value $($_.AppliesTo)
3109                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Enforce password history -$i" -Value $_.PasswordHistoryCount
3110                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Maximum password age (days) -$i" -Value $_.MaxPasswordAge.days
3111                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Minimum password age (days) -$i" -Value $_.MinPasswordAge.days
3112                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Minimum password length -$i" -Value $_.MinPasswordLength
3113                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Password must meet complexity requirements -$i" -Value $_.ComplexityEnabled
3114                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Store password using reversible encryption -$i" -Value $_.ReversibleEncryptionEnabled
3115                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Account lockout duration (mins) -$i" -Value $_.LockoutDuration.minutes
3116                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Account lockout threshold -$i" -Value $_.LockoutThreshold
3117                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Reset account lockout counter after (mins) -$i" -Value $_.LockoutObservationWindow.minutes
3118                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Precedence -$i" -Value $($_.Precedence)
3119                $i ++
3120            }
3121            Remove-Variable ADFinepasspolicy
3122        }
3123    }
3124
3125    If ($Protocol -eq 'LDAP')
3126    {
3127        If ($ObjDomain)
3128        {
3129            #Value taken from https://msdn.microsoft.com/en-us/library/ms679431(v=vs.85).aspx
3130            $pwdProperties = @{
3131                "DOMAIN_PASSWORD_COMPLEX" = 1;
3132                "DOMAIN_PASSWORD_NO_ANON_CHANGE" = 2;
3133                "DOMAIN_PASSWORD_NO_CLEAR_CHANGE" = 4;
3134                "DOMAIN_LOCKOUT_ADMINS" = 8;
3135                "DOMAIN_PASSWORD_STORE_CLEARTEXT" = 16;
3136                "DOMAIN_REFUSE_PASSWORD_CHANGE" = 32
3137            }
3138
3139            $ADPassPolObj = New-Object PSObject
3140            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Policy" -Value "Value"
3141            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Enforce password history" -Value $ObjDomain.PwdHistoryLength.value
3142            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Maximum password age (days)" -Value $($ObjDomain.ConvertLargeIntegerToInt64($ObjDomain.maxpwdage.value) /-864000000000)
3143            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Minimum password age (days)" -Value $($ObjDomain.ConvertLargeIntegerToInt64($ObjDomain.minpwdage.value) /-864000000000)
3144            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Minimum password length" -Value $ObjDomain.MinPwdLength.value
3145            If (($ObjDomain.pwdproperties.value -band $pwdProperties["DOMAIN_PASSWORD_COMPLEX"]) -eq $pwdProperties["DOMAIN_PASSWORD_COMPLEX"])
3146            {
3147                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Password must meet complexity requirements" -Value $true
3148            }
3149            Else
3150            {
3151                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Password must meet complexity requirements" -Value $false
3152            }
3153            If (($ObjDomain.pwdproperties.value -band $pwdProperties["DOMAIN_PASSWORD_STORE_CLEARTEXT"]) -eq $pwdProperties["DOMAIN_PASSWORD_STORE_CLEARTEXT"])
3154            {
3155                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Store password using reversible encryption for all users in the domain" -Value $true
3156            }
3157            Else
3158            {
3159                $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Store password using reversible encryption for all users in the domain" -Value $false
3160            }
3161            Remove-Variable pwdProperties
3162            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Account lockout duration (mins)" -Value $($ObjDomain.ConvertLargeIntegerToInt64($ObjDomain.lockoutduration.value)/-600000000)
3163            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Account lockout threshold" -Value $ObjDomain.LockoutThreshold.value
3164            $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Reset account lockout counter after (mins)" -Value $($ObjDomain.ConvertLargeIntegerToInt64($ObjDomain.lockoutobservationWindow.value)/-600000000)
3165
3166            Write-Output "[-] Fine Grained Password Policy - May need a Privileged Account"
3167            $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
3168            $ObjSearcher.PageSize = $PageSize
3169            $ObjSearcher.Filter = "(objectClass=msDS-PasswordSettings)"
3170            #$ObjSearcher.PropertiesToLoad.AddRange(("admincount","canonicalname","description","distinguishedname","lastLogontimestamp","name","objectsid","primarygroupid","pwdLastSet","samaccountName","serviceprincipalname","sidhistory","useraccountcontrol","userworkstations","whenchanged","whencreated"))
3171            $ObjSearcher.SearchScope = "Subtree"
3172            Try
3173            {
3174                $ADFinepasspolicy = $ObjSearcher.FindAll()
3175            }
3176            Catch
3177            {
3178                Write-Output "[EXCEPTION] $($_.Exception.Message)"
3179                Return $null
3180            }
3181
3182            If ($ADFinepasspolicy)
3183            {
3184                $i = 0
3185                $ADFinepasspolicy | ForEach-Object {
3186                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Name -$i" -Value $($_.Properties.name)
3187                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Applies To -$i" -Value $($_.Properties.'msds-psoappliesto')
3188                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Enforce password history -$i" -Value $($_.Properties.'msds-passwordhistorylength')
3189                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Maximum password age (days) -$i" -Value $($($_.Properties.'msds-maximumpasswordage') /-864000000000)
3190                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Minimum password age (days) -$i" -Value $($($_.Properties.'msds-minimumpasswordage') /-864000000000)
3191                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Minimum password length -$i" -Value $($_.Properties.'msds-minimumpasswordlength')
3192                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Password must meet complexity requirements -$i" -Value $($_.Properties.'msds-passwordcomplexityenabled')
3193                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Store password using reversible encryption -$i" -Value $($_.Properties.'msds-passwordreversibleencryptionenabled')
3194                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Account lockout duration (mins) -$i" -Value $($($_.Properties.'msds-lockoutduration')/-600000000)
3195                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Account lockout threshold -$i" -Value $($_.Properties.'msds-lockoutthreshold')
3196                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Reset account lockout counter after (mins) -$i" -Value $($($_.Properties.'msds-lockoutobservationwindow')/-600000000)
3197                    $ADPassPolObj | Add-Member -MemberType NoteProperty -Name "Precedence -$i" -Value $($_.Properties.'msds-passwordsettingsprecedence')
3198                    $i ++
3199                }
3200                Remove-Variable ADFinepasspolicy
3201            }
3202        }
3203    }
3204
3205    If ($ADPassPolObj)
3206    {
3207        Write-Verbose "[+] Default Password Policy"
3208        $ADFileName = -join($ReportPath,'\','DefaultPasswordPolicy','.csv')
3209        Try
3210        {
3211            $ADPassPolObj | Export-Csv -Path $ADFileName -NoTypeInformation
3212        }
3213        Catch
3214        {
3215            Write-Output "[ERROR] Failed to Export CSV File"
3216            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3217        }
3218        Remove-Variable ADPassPolObj
3219        Remove-Variable ADFileName
3220    }
3221}
3222
3223Function Get-ADRADDC
3224{
3225    param(
3226        [Parameter(Mandatory = $true)]
3227        [string] $Protocol,
3228
3229        [Parameter(Mandatory = $true)]
3230        [bool] $UseAltCreds,
3231
3232        [Parameter(Mandatory = $true)]
3233        [string] $ReportPath,
3234
3235        [Parameter(Mandatory = $false)]
3236        [DirectoryServices.DirectoryEntry] $objDomain
3237    )
3238
3239    Write-Output "[-] Domain Controllers"
3240    If ($Protocol -eq 'ADWS')
3241    {
3242        Try
3243        {
3244            $allDCs = Get-ADDomainController -Filter *
3245        }
3246        Catch
3247        {
3248            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3249        }
3250
3251        # DC Info
3252        If ($allDCs)
3253        {
3254            # DC Info
3255            $DCObj = @()
3256            $allDCs | ForEach-Object {
3257                # Create the object for each instance.
3258                $Obj = New-Object PSObject
3259                $Obj | Add-Member -MemberType NoteProperty -Name "Domain" -Value $_.Domain
3260                $Obj | Add-Member -MemberType NoteProperty -Name "Site" -Value $_.Site
3261                $Obj | Add-Member -MemberType NoteProperty -Name "Name" -Value $_.Name
3262                $Obj | Add-Member -MemberType NoteProperty -Name "IPv4Address" -Value $_.IPv4Address
3263                $OSVersion = $_.OperatingSystem + $_.OperatingSystemHotfix + $_.OperatingSystemServicePack + $_.OperatingSystemVersion
3264                $Obj | Add-Member -MemberType NoteProperty -Name "Operating System" -Value $OSVersion
3265                Remove-Variable OSVersion
3266                $Obj | Add-Member -MemberType NoteProperty -Name "Hostname" -Value $_.HostName
3267                If ($_.OperationMasterRoles -like 'InfrastructureMaster')
3268                {
3269                    $Obj | Add-Member -MemberType NoteProperty -Name "Infra" -Value $true
3270                }
3271                Else
3272                {
3273                    $Obj | Add-Member -MemberType NoteProperty -Name "Infra" -Value $false
3274                }
3275                If ($_.OperationMasterRoles -like 'DomainNamingMaster')
3276                {
3277                    $Obj | Add-Member -MemberType NoteProperty -Name "Naming" -Value $true
3278                }
3279                Else
3280                {
3281                    $Obj | Add-Member -MemberType NoteProperty -Name "Naming" -Value $false
3282                }
3283                If ($_.OperationMasterRoles -like 'SchemaMaster')
3284                {
3285                    $Obj | Add-Member -MemberType NoteProperty -Name "Schema" -Value $true
3286                }
3287                Else
3288                {
3289                    $Obj | Add-Member -MemberType NoteProperty -Name "Schema" -Value $false
3290                }
3291                If ($_.OperationMasterRoles -like 'RIDMaster')
3292                {
3293                    $Obj | Add-Member -MemberType NoteProperty -Name "RID" -Value $true
3294                }
3295                Else
3296                {
3297                    $Obj | Add-Member -MemberType NoteProperty -Name "RID" -Value $false
3298                }
3299                If ($_.OperationMasterRoles -like 'PDCEmulator')
3300                {
3301                    $Obj | Add-Member -MemberType NoteProperty -Name "PDC" -Value $true
3302                }
3303                Else
3304                {
3305                    $Obj | Add-Member -MemberType NoteProperty -Name "PDC" -Value $false
3306                }
3307                $DCObj += $Obj
3308            }
3309            Remove-Variable allDCs
3310        }
3311    }
3312
3313    If ($Protocol -eq 'LDAP')
3314    {
3315        If ($UseAltCreds)
3316        {
3317            $DomainFQDN = Get-DNtoFQDN($objDomain.distinguishedName)
3318            $DomainContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext("Domain",$($DomainFQDN),$($creds.UserName),$($creds.GetNetworkCredential().password))
3319            Try
3320            {
3321                $ADDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetDomain($DomainContext)
3322            }
3323            Catch
3324            {
3325                Write-Output "[EXCEPTION] $($_.Exception.Message)"
3326                Return $null
3327            }
3328            Remove-Variable DomainContext
3329        }
3330        Else
3331        {
3332            $ADDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
3333        }
3334
3335        If ($ADDomain.DomainControllers)
3336        {
3337            # DC Info
3338            $DCObj = @()
3339            $ADDomain.DomainControllers | ForEach-Object {
3340                # Create the object for each instance.
3341                $Obj = New-Object PSObject
3342                $Obj | Add-Member -MemberType NoteProperty -Name "Domain" -Value $_.Domain
3343                $Obj | Add-Member -MemberType NoteProperty -Name "Site" -Value $_.SiteName
3344                $Obj | Add-Member -MemberType NoteProperty -Name "Name" -Value $_.Name
3345                $Obj | Add-Member -MemberType NoteProperty -Name "IPAddress" -Value $_.IPAddress
3346                $Obj | Add-Member -MemberType NoteProperty -Name "Operating System" -Value $_.OSVersion
3347                $Obj | Add-Member -MemberType NoteProperty -Name "Hostname" -Value $_.Hostname
3348                $Obj | Add-Member -MemberType NoteProperty -Name "Infra" -Value $($_.Roles.Contains("InfrastructureRole"))
3349                $Obj | Add-Member -MemberType NoteProperty -Name "Naming" -Value $($_.Roles.Contains("NamingRole"))
3350                $Obj | Add-Member -MemberType NoteProperty -Name "Schema" -Value $($_.Roles.Contains("SchemaRole"))
3351                $Obj | Add-Member -MemberType NoteProperty -Name "RID" -Value $($_.Roles.Contains("RidRole"))
3352                $Obj | Add-Member -MemberType NoteProperty -Name "PDC" -Value $($_.Roles.Contains("PdcRole"))
3353                $DCObj += $Obj
3354            }
3355            Remove-Variable ADDomain
3356        }
3357    }
3358
3359    If ($DCObj)
3360    {
3361        Write-Verbose "[+] Domain Controllers"
3362        $ADFileName  = -join($ReportPath,'\','DCs','.csv')
3363        Try
3364        {
3365            $DCObj | Export-Csv -Path $ADFileName -NoTypeInformation
3366        }
3367        Catch
3368        {
3369            Write-Output "[ERROR] Failed to Export CSV File"
3370            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3371        }
3372        Remove-Variable DCObj
3373        Remove-Variable ADFileName
3374    }
3375}
3376
3377Function Get-ADRADUser
3378{
3379    param(
3380        [Parameter(Mandatory = $true)]
3381        [string] $Protocol,
3382
3383        [Parameter(Mandatory = $true)]
3384        [bool] $UseAltCreds,
3385
3386        [Parameter(Mandatory = $true)]
3387        [string] $ReportPath,
3388
3389        [Parameter(Mandatory = $true)]
3390        [DateTime] $date,
3391
3392        [Parameter(Mandatory = $false)]
3393        [DirectoryServices.DirectoryEntry] $objDomain,
3394
3395        [Parameter(Mandatory = $true)]
3396        [int] $DormantTimeSpan = 90,
3397
3398        [Parameter(Mandatory = $true)]
3399        [int] $PageSize,
3400
3401        [Parameter(Mandatory = $false)]
3402        [int] $Threads = 10,
3403
3404        [Parameter(Mandatory = $false)]
3405        [int] $FlushCount = -1
3406    )
3407
3408    Write-Output "[-] Domain Users - May take some time"
3409    If ($Protocol -eq 'ADWS')
3410    {
3411        Try
3412        {
3413            $ADUsers = Get-ADUser -Filter * -ResultPageSize $PageSize -Properties AdminCount,AllowReversiblePasswordEncryption,CannotChangePassword,CanonicalName,Description,DistinguishedName,DoesNotRequirePreAuth,Enabled,LastLogonDate,LockedOut,LogonWorkstations,Name,PasswordLastSet,PasswordNeverExpires,PasswordNotRequired,primaryGroupID,pwdlastset,SamAccountName,SID,SIDHistory,TrustedForDelegation,TrustedToAuthForDelegation,whenChanged,whenCreated
3414        }
3415        Catch
3416        {
3417            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3418            Continue
3419        }
3420
3421        If ($ADUsers)
3422        {
3423            Try
3424            {
3425                $ADpasspolicy = Get-ADDefaultDomainPasswordPolicy
3426                $PassMaxAge = $ADpasspolicy.MaxPasswordAge.days
3427                Remove-Variable ADpasspolicy
3428            }
3429            Catch
3430            {
3431                Write-Output "[EXCEPTION] $($_.Exception.Message)"
3432                $PassMaxAge = 90
3433            }
3434
3435            $ADFileName  = -join($ReportPath,'\','Users','.csv')
3436            [ADRecon.ADWSClass]::UserParser($ADUsers, $date, $PassMaxAge, $ADFileName, $DormantTimeSpan, $Threads, $FlushCount)
3437            Remove-Variable ADUsers
3438            Write-Verbose "[+] Domain Users"
3439        }
3440        Write-Verbose "[+] Domain Users"
3441    }
3442
3443    If ($Protocol -eq 'LDAP')
3444    {
3445        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
3446        $ObjSearcher.PageSize = $PageSize
3447        $ObjSearcher.Filter = "(samAccountType=805306368)"
3448        $ObjSearcher.PropertiesToLoad.AddRange(("admincount","canonicalname","description","distinguishedname","lastLogontimestamp","name","objectsid","primarygroupid","pwdLastSet","samaccountName","serviceprincipalname","sidhistory","useraccountcontrol","userworkstations","whenchanged","whencreated"))
3449        $ObjSearcher.SearchScope = "Subtree"
3450        Try
3451        {
3452            $ADUsers = $ObjSearcher.FindAll()
3453        }
3454        Catch
3455        {
3456            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3457            Return $null
3458        }
3459        $ObjSearcher.dispose()
3460
3461        If ($ADUsers)
3462        {
3463            $PassMaxAge = $($ObjDomain.ConvertLargeIntegerToInt64($ObjDomain.maxpwdage.value) /-864000000000)
3464            If (-Not $PassMaxAge)
3465            {
3466                $PassMaxAge = 90
3467            }
3468            $icnt = 1
3469            $cnt = $($ADUsers | Measure-Object | Select-Object -ExpandProperty Count)
3470            Write-Output "[*] Calculating if the user Cannot Change Password"
3471            $CannotChangePassword = New-Object 'System.Collections.Generic.Dictionary[String,bool]'
3472            $StopWatch = [System.Diagnostics.StopWatch]::StartNew()
3473            $ADUsers | ForEach-Object {
3474                If ($StopWatch.Elapsed.TotalMilliseconds -ge 1000)
3475                {
3476                    Write-Progress -Activity "Calculating if the user Cannot Change Password" -Status "$("{0:N2}" -f (($icnt/$cnt*100),2)) % Complete:" -PercentComplete 100
3477                    $StopWatch.Reset()
3478                    $StopWatch.Start()
3479                }
3480                # Get ACLs to determine if the user can change their password or not
3481                $data = $_.GetDirectoryEntry()
3482                $aclObject = $data.Get_ObjectSecurity()
3483                ForEach ($access in $aclObject.Access)
3484                {
3485                    If (($access.ObjectType -eq "ab721a53-1e2f-11d0-9819-00aa0040529b") -or ($access.ObjectType -eq "AB721A53-1E2F-11D0-9819-00AA0040529B"))
3486                    {
3487                        If ($access.AccessControlType -eq "Deny")
3488                        {
3489                            If ($access.IdentityReference -eq "Everyone")
3490                            {
3491                                $DenyEveryone = $true
3492                            }
3493                            Elseif ($access.IdentityReference -eq "NT AUTHORITY\SELF")
3494                            {
3495                                $DenySelf = $true
3496                            }
3497                        }
3498                    }
3499                }
3500                If ($DenyEveryone -and $DenySelf)
3501                {
3502                    $CannotChangePassword.Add($($_.properties.samaccountname),$true)
3503                    Remove-Variable DenyEveryone
3504                    Remove-Variable DenySelf
3505                }
3506                Else
3507                {
3508                    $CannotChangePassword.Add($($_.properties.samaccountname),$false)
3509                }
3510                Remove-Variable data
3511                Remove-Variable aclObject
3512                $icnt ++
3513            }
3514            Write-Progress -Activity "Calculating if the user Cannot Change Password" -Completed -Status "All Done"
3515            $ADFileName  = -join($ReportPath,'\','Users','.csv')
3516            [ADRecon.LDAPClass]::UserParser($ADUsers, $date, $PassMaxAge, $ADFileName, $CannotChangePassword, $DormantTimeSpan, $Threads, $FlushCount)
3517            Remove-Variable ADUsers
3518            Write-Verbose "[+] Domain Users"
3519        }
3520    }
3521}
3522
3523Function Get-ADRADUserSPN
3524{
3525    param(
3526        [Parameter(Mandatory = $true)]
3527        [string] $Protocol,
3528
3529        [Parameter(Mandatory = $true)]
3530        [bool] $UseAltCreds,
3531
3532        [Parameter(Mandatory = $true)]
3533        [string] $ReportPath,
3534
3535        [Parameter(Mandatory = $false)]
3536        [DirectoryServices.DirectoryEntry] $objDomain,
3537
3538        [Parameter(Mandatory = $true)]
3539        [int] $PageSize,
3540
3541        [Parameter(Mandatory = $false)]
3542        [int] $Threads = 10,
3543
3544        [Parameter(Mandatory = $false)]
3545        [int] $FlushCount = -1
3546    )
3547
3548    Write-Output "[-] Domain User SPNs"
3549    If ($Protocol -eq 'ADWS')
3550    {
3551        Try
3552        {
3553            $ADUsers = Get-ADObject -LDAPFilter "(&(!objectClass=computer)(servicePrincipalName=*))" -Properties Name,sAMAccountName,servicePrincipalName,pwdLastSet,Description -ResultPageSize $PageSize
3554        }
3555        Catch
3556        {
3557            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3558            Continue
3559        }
3560
3561        If ($ADUsers)
3562        {
3563            $ADFileName  = -join($ReportPath,'\','UserSPNs','.csv')
3564            $SPNCount = [ADRecon.ADWSClass]::UserSPNParser($ADUsers, $ADFileName, $Threads, $FlushCount)
3565            # Temporary solution for exception in [ADRecon.ADWSClass]::UserSPNParser
3566            # System.InvalidCastException: Unable to cast object of type 'Microsoft.ActiveDirectory.Management.ADObject' to type 'System.Management.Automation.PSObject'.
3567            If ($SPNCount -eq 1)
3568            {
3569                $UserSPNObj = @()
3570                $ADUsers | ForEach-Object {
3571                    For($i=0; $i -lt $_.servicePrincipalName.count; $i++)
3572                    {
3573                        $Obj = New-Object PSObject
3574                        [array] $SPNObjectArray = $_.servicePrincipalName[$i] -Split("/")
3575                        $Obj | Add-Member -MemberType NoteProperty -Name "Name" -Value $_.Name
3576                        $Obj | Add-Member -MemberType NoteProperty -Name "Username" -Value $_.sAMAccountName
3577                        $Obj | Add-Member -MemberType NoteProperty -Name "Service" -Value $SPNObjectArray[0]
3578                        $Obj | Add-Member -MemberType NoteProperty -Name "Host" -Value $SPNObjectArray[1]
3579                        If ($null -ne $_.pwdLastSet)
3580                        {
3581                            $pwdlastSet = [datetime]::FromFileTime($_.pwdLastSet)
3582                        }
3583                        Else
3584                        {
3585                            $pwdlastSet = "-"
3586                        }
3587                        $Obj | Add-Member -MemberType NoteProperty -Name "Password Last Set" -Value $pwdlastSet
3588                        $Obj | Add-Member -MemberType NoteProperty -Name "Description" -Value $_.description
3589                        $UserSPNObj += $Obj
3590                    }
3591                }
3592                If ($UserSPNObj)
3593                {
3594                    Try
3595                    {
3596                        $UserSPNObj | Export-Csv -Path $ADFileName -NoTypeInformation
3597                    }
3598                    Catch
3599                    {
3600                        Write-Output "[ERROR] Failed to Export CSV File"
3601                        Write-Output "[EXCEPTION] $($_.Exception.Message)"
3602                    }
3603                }
3604            }
3605            Remove-Variable ADUsers
3606            Write-Verbose "[+] Domain User SPNs"
3607        }
3608    }
3609
3610    If ($Protocol -eq 'LDAP')
3611    {
3612        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
3613        $ObjSearcher.PageSize = $PageSize
3614        $ObjSearcher.Filter = "(&(!objectClass=computer)(servicePrincipalName=*))"
3615        $ObjSearcher.PropertiesToLoad.AddRange(("name","samaccountname","serviceprincipalname","pwdlastset","description"))
3616        $ObjSearcher.SearchScope = "Subtree"
3617        Try
3618        {
3619            $ADUsers = $ObjSearcher.FindAll()
3620        }
3621        Catch
3622        {
3623            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3624            Return $null
3625        }
3626        $ObjSearcher.dispose()
3627
3628        If ($ADUsers)
3629        {
3630            $ADFileName  = -join($ReportPath,'\','UserSPNs','.csv')
3631            [ADRecon.LDAPClass]::UserSPNParser($ADUsers, $ADFileName, $Threads, $FlushCount)
3632            Remove-Variable ADUsers
3633            Write-Verbose "[+] Domain User SPNs"
3634        }
3635    }
3636}
3637
3638Function Get-ADRADGroup
3639{
3640    param(
3641        [Parameter(Mandatory = $true)]
3642        [string] $Protocol,
3643
3644        [Parameter(Mandatory = $true)]
3645        [bool] $UseAltCreds,
3646
3647        [Parameter(Mandatory = $true)]
3648        [string] $ReportPath,
3649
3650        [Parameter(Mandatory = $false)]
3651        [DirectoryServices.DirectoryEntry] $objDomain,
3652
3653        [Parameter(Mandatory = $true)]
3654        [int] $PageSize,
3655
3656        [Parameter(Mandatory = $false)]
3657        [int] $Threads = 10,
3658
3659        [Parameter(Mandatory = $false)]
3660        [int] $FlushCount = -1
3661    )
3662
3663    Write-Output "[-] Domain Groups - May take some time"
3664    If ($Protocol -eq 'ADWS')
3665    {
3666        Try
3667        {
3668            $ADGroups = Get-ADGroup -Filter * -ResultPageSize $PageSize -Properties CanonicalName,DistinguishedName,Description,SamAccountName,SID,managedBy,whenChanged,whenCreated
3669        }
3670        Catch
3671        {
3672            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3673        }
3674
3675        If ($ADGroups)
3676        {
3677            $ADFileName  = -join($ReportPath,'\','Groups','.csv')
3678            [ADRecon.ADWSClass]::GroupParser($ADGroups, $ADFileName, $Threads, $FlushCount)
3679            Remove-Variable ADGroups
3680            Write-Verbose "[+] Domain Groups"
3681        }
3682    }
3683
3684    If ($Protocol -eq 'LDAP')
3685    {
3686        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
3687        $ObjSearcher.PageSize = $PageSize
3688        $ObjSearcher.Filter = "(objectClass=group)"
3689        $ObjSearcher.PropertiesToLoad.AddRange(("canonicalname", "distinguishedname", "description", "samaccountname", "managedby", "objectsid", "whencreated", "whenchanged"))
3690        $ObjSearcher.SearchScope = "Subtree"
3691
3692        Try
3693        {
3694            $ADGroups = $ObjSearcher.FindAll()
3695        }
3696        Catch
3697        {
3698            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3699        }
3700        $ObjSearcher.dispose()
3701
3702        If ($ADGroups)
3703        {
3704            $ADFileName  = -join($ReportPath,'\','Groups','.csv')
3705            [ADRecon.LDAPClass]::GroupParser($ADGroups, $ADFileName, $Threads, $FlushCount)
3706            Remove-Variable ADGroups
3707            Write-Verbose "[+] Domain Groups"
3708        }
3709    }
3710}
3711
3712Function Get-ADRADGroupMember
3713{
3714    param(
3715        [Parameter(Mandatory = $true)]
3716        [string] $Protocol,
3717
3718        [Parameter(Mandatory = $true)]
3719        [bool] $UseAltCreds,
3720
3721        [Parameter(Mandatory = $true)]
3722        [string] $ReportPath,
3723
3724        [Parameter(Mandatory = $false)]
3725        [DirectoryServices.DirectoryEntry] $objDomain,
3726
3727        [Parameter(Mandatory = $true)]
3728        [int] $PageSize,
3729
3730        [Parameter(Mandatory = $false)]
3731        [int] $Threads = 10,
3732
3733        [Parameter(Mandatory = $false)]
3734        [int] $FlushCount = -1
3735    )
3736
3737    Write-Output "[-] Domain Group Memberships - May take some time"
3738    If ($Protocol -eq 'ADWS')
3739    {
3740        Try
3741        {
3742            $ADGroups = Get-ADObject -LDAPFilter '(memberof=*)' -Properties DistinguishedName,sAMAccountName,memberof,samaccounttype
3743        }
3744        Catch
3745        {
3746            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3747        }
3748
3749        If ($ADGroups)
3750        {
3751            $ADFileName  = -join($ReportPath,'\','GroupMembers','.csv')
3752            [ADRecon.ADWSClass]::GroupMemberParser($ADGroups, $ADFileName, $Threads, $FlushCount)
3753            Remove-Variable ADGroups
3754            Write-Verbose "[+] Domain Group Memberships"
3755        }
3756    }
3757
3758    If ($Protocol -eq 'LDAP')
3759    {
3760        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
3761        $ObjSearcher.PageSize = $PageSize
3762        $ObjSearcher.Filter = "(memberof=*)"
3763        $ObjSearcher.PropertiesToLoad.AddRange(("samaccountname", "distinguishedname", "dnshostname", "samaccounttype", "memberof"))
3764        $ObjSearcher.SearchScope = "Subtree"
3765
3766        Try
3767        {
3768            $ADGroups = $ObjSearcher.FindAll()
3769        }
3770        Catch
3771        {
3772            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3773        }
3774        $ObjSearcher.dispose()
3775
3776        If ($ADGroups)
3777        {
3778            $ADFileName  = -join($ReportPath,'\','GroupMembers','.csv')
3779            [ADRecon.LDAPClass]::GroupMemberParser($ADGroups, $ADFileName, $Threads, $FlushCount)
3780            Remove-Variable ADGroups
3781            Write-Verbose "[+] Domain Group Memberships"
3782        }
3783    }
3784}
3785
3786Function Get-ADRADOU
3787{
3788    param(
3789        [Parameter(Mandatory = $true)]
3790        [string] $Protocol,
3791
3792        [Parameter(Mandatory = $true)]
3793        [bool] $UseAltCreds,
3794
3795        [Parameter(Mandatory = $true)]
3796        [string] $ReportPath,
3797
3798        [Parameter(Mandatory = $false)]
3799        [DirectoryServices.DirectoryEntry] $objDomain,
3800
3801        [Parameter(Mandatory = $true)]
3802        [int] $PageSize
3803    )
3804
3805    Write-Output "[-] Domain OrganizationalUnits"
3806    If ($Protocol -eq 'ADWS')
3807    {
3808        Try
3809        {
3810            $ADOUs = Get-ADOrganizationalUnit -Filter * -Properties Created,DistinguishedName,Description,Name
3811        }
3812        Catch
3813        {
3814            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3815        }
3816
3817        If ($ADOUs)
3818        {
3819            Write-Output "[*] Total OUs: $($ADOUs | Measure-Object | Select-Object -ExpandProperty Count)"
3820            $OUObj = @()
3821            $ADOUs | ForEach-Object {
3822                # Create the object for each instance.
3823                $Obj = New-Object PSObject
3824                $Obj | Add-Member -MemberType NoteProperty -Name Name -Value $_.Name
3825                $Obj | Add-Member -MemberType NoteProperty -Name Created -Value $_.Created
3826                $Obj | Add-Member -MemberType NoteProperty -Name DistinguishedName -Value $_.DistinguishedName
3827                $Obj | Add-Member -MemberType NoteProperty -Name Description -Value $_.Description
3828                $OUObj += $Obj
3829            }
3830            Remove-Variable ADOUs
3831        }
3832    }
3833
3834    If ($Protocol -eq 'LDAP')
3835    {
3836        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
3837        $ObjSearcher.PageSize = $PageSize
3838        $ObjSearcher.Filter = "(objectCategory=organizationalunit)"
3839        $ObjSearcher.SearchScope = "Subtree"
3840
3841        Try
3842        {
3843            $ADOUs = $ObjSearcher.FindAll()
3844        }
3845        Catch
3846        {
3847            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3848        }
3849        $ObjSearcher.dispose()
3850
3851        If ($ADOUs)
3852        {
3853            Write-Output "[*] Total OUs: $($ADOUs | Measure-Object | Select-Object -ExpandProperty Count)"
3854            $OUObj = @()
3855            $ADOUs | ForEach-Object {
3856                # Create the object for each instance.
3857                $Obj = New-Object PSObject
3858                $Obj | Add-Member -MemberType NoteProperty -Name Name -Value ([string] $($_.Properties.name))
3859                $Obj | Add-Member -MemberType NoteProperty -Name Created -Value ([DateTime] $($_.Properties.whencreated))
3860                $Obj | Add-Member -MemberType NoteProperty -Name DistinguishedName -Value ([string] $($_.Properties.distinguishedname))
3861                $Obj | Add-Member -MemberType NoteProperty -Name Description -Value ([string] $($_.Properties.description))
3862                $OUObj += $Obj
3863            }
3864            Remove-Variable ADOUs
3865        }
3866    }
3867
3868    If ($OUObj)
3869    {
3870        Write-Verbose "[+] Domain OrganizationalUnits"
3871        $ADFileName = -join($ReportPath,'\','OUs','.csv')
3872        Try
3873        {
3874            $OUObj | Export-Csv -Path $ADFileName -NoTypeInformation
3875        }
3876        Catch
3877        {
3878            Write-Output "Failed to Export CSV File"
3879            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3880        }
3881        Remove-Variable OUObj
3882        Remove-Variable ADFileName
3883    }
3884}
3885
3886Function Get-ADRADOUPermission
3887{
3888    param(
3889        [Parameter(Mandatory = $true)]
3890        [string] $Protocol,
3891
3892        [Parameter(Mandatory = $true)]
3893        [bool] $UseAltCreds,
3894
3895        [Parameter(Mandatory = $true)]
3896        [string] $ReportPath,
3897
3898        [Parameter(Mandatory = $false)]
3899        [DirectoryServices.DirectoryEntry] $objDomain,
3900
3901        [Parameter(Mandatory = $false)]
3902        [string] $DCIP,
3903
3904        [Parameter(Mandatory = $false)]
3905        [Management.Automation.PSCredential] $creds = [Management.Automation.PSCredential]::Empty,
3906
3907        [Parameter(Mandatory = $true)]
3908        [int] $PageSize
3909    )
3910
3911    Write-Output "[-] Domain OrganizationalUnits Permissions - May take some time"
3912    # based on https://gallery.technet.microsoft.com/Active-Directory-OU-1d09f989
3913    If ($Protocol -eq 'ADWS')
3914    {
3915        Try
3916        {
3917            If (-Not $UseAltCreds)
3918            {
3919                Set-Location AD:
3920            }
3921            $schemaIDGUID = @{}
3922            $GUIDs = @{'00000000-0000-0000-0000-000000000000' = 'All'}
3923
3924            $schemaIDs = Get-ADObject -SearchBase (Get-ADRootDSE).schemaNamingContext -LDAPFilter '(schemaIDGUID=*)' -Properties name, schemaIDGUID
3925
3926            $schemaIDs | Where-Object {$_} | ForEach-Object {
3927                # convert the GUID
3928                $GUIDs[(New-Object Guid (,$_.schemaIDGUID)).Guid] = $_.name
3929            }
3930            Remove-Variable schemaIDs
3931
3932            $schemaIDs = Get-ADObject -SearchBase "CN=Extended-Rights,$((Get-ADRootDSE).configurationNamingContext)" -LDAPFilter '(objectClass=controlAccessRight)' -Properties name, rightsGUID
3933
3934            $schemaIDs | Where-Object {$_} | ForEach-Object {
3935                # convert the GUID
3936                $GUIDs[(New-Object Guid (,$_.rightsGUID)).Guid] = $_.name
3937            }
3938            Remove-Variable schemaIDs
3939
3940            # Get a list of all OUs.  Add in the root containers for good measure (users, computers, etc.).
3941            $OUs  = @(Get-ADDomain | Select-Object -ExpandProperty DistinguishedName)
3942            $OUs += Get-ADOrganizationalUnit -Filter * | Select-Object -ExpandProperty DistinguishedName
3943            $OUs += Get-ADObject -SearchBase (Get-ADDomain).DistinguishedName -SearchScope OneLevel -LDAPFilter '(objectClass=container)' | Select-Object -ExpandProperty DistinguishedName
3944            ForEach ($OU in $OUs)
3945            {
3946                $OUPermissions += Get-Acl -Path "$OU" |
3947                Select-Object -ExpandProperty Access |
3948                Select-Object @{name='organizationalUnit';expression={$OU}}, `
3949                       @{name='objectTypeName';expression={$GUIDs[$_.objectType.ToString()]}}, `
3950                       @{name='inheritedObjectTypeName';expression={$GUIDs[$_.inheritedObjectType.ToString()]}}, `
3951                       *
3952            }
3953            Remove-Variable OUs
3954            Remove-Variable GUIDs
3955        }
3956        Catch
3957        {
3958            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3959        }
3960    }
3961
3962    If ($Protocol -eq 'LDAP')
3963    {
3964        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
3965        $ObjSearcher.PageSize = $PageSize
3966        $ObjSearcher.Filter = "(objectCategory=organizationalunit)"
3967        $ObjSearcher.SearchScope = "Subtree"
3968
3969        Try
3970        {
3971            $ADOUs = $ObjSearcher.FindAll()
3972        }
3973        Catch
3974        {
3975            Write-Output "[EXCEPTION] $($_.Exception.Message)"
3976        }
3977        $ObjSearcher.dispose()
3978
3979        $OUPermissions = @()
3980        If ($ADOUs)
3981        {
3982            $GUIDs = @{'00000000-0000-0000-0000-000000000000' = 'All'}
3983
3984        If ($UseAltCreds)
3985        {
3986            $DomainFQDN = Get-DNtoFQDN($objDomain.distinguishedName)
3987            $DomainContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext("Domain",$($DomainFQDN),$($creds.UserName),$($creds.GetNetworkCredential().password))
3988            Try
3989            {
3990                $ADDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetDomain($DomainContext)
3991            }
3992            Catch
3993            {
3994                Write-Output "[EXCEPTION] $($_.Exception.Message)"
3995            }
3996
3997            $ForestContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext("Forest",$($ADDomain.Forest),$($creds.UserName),$($creds.GetNetworkCredential().password))
3998            Try
3999            {
4000                $ADForest = [System.DirectoryServices.ActiveDirectory.Forest]::GetForest($ForestContext)
4001                $SchemaPath = $ADForest.Schema.Name
4002            }
4003            Catch
4004            {
4005                Write-Output "[EXCEPTION] $($_.Exception.Message)"
4006            }
4007        }
4008        Else
4009        {
4010            $ADForest = [System.DirectoryServices.ActiveDirectory.Forest]::GetCurrentForest()
4011            $SchemaPath = $ADForest.Schema.Name
4012            Remove-Variable SchemaPath
4013        }
4014
4015            If ($SchemaPath)
4016            {
4017                If ($UseAltCreds)
4018                {
4019                    $objSearchPath = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($DCIP)/$($SchemaPath)", $creds.UserName,$creds.GetNetworkCredential().Password
4020                    $objSearcherPath = New-Object System.DirectoryServices.DirectorySearcher $objSearchPath
4021                }
4022                Else
4023                {
4024                    $objSearcherPath = New-Object System.DirectoryServices.DirectorySearcher ([ADSI] "LDAP://$($SchemaPath)")
4025                }
4026                $objSearcherPath.PageSize = $PageSize
4027                $objSearcherPath.CacheResults = $False
4028                $objSearcherPath.filter = "(schemaIDGUID=*)"
4029
4030                Try
4031                {
4032                    $SchemaSearcher = $objSearcherPath.FindAll()
4033                }
4034                Catch
4035                {
4036                    Write-Output "[EXCEPTION] $($_.Exception.Message)"
4037                }
4038
4039                If ($SchemaSearcher)
4040                {
4041                    $SchemaSearcher | Where-Object {$_} | ForEach-Object {
4042                        # convert the GUID
4043                        $GUIDs[(New-Object Guid (,$_.properties.schemaidguid[0])).Guid] = $_.properties.name[0]
4044                    }
4045                    $SchemaSearcher.dispose()
4046                }
4047                $objSearcherPath.dispose()
4048
4049                If ($UseAltCreds)
4050                {
4051                    $objSearchPath = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($DCIP)/$($SchemaPath.replace("Schema","Extended-Rights"))", $creds.UserName,$creds.GetNetworkCredential().Password
4052                    $objSearcherPath = New-Object System.DirectoryServices.DirectorySearcher $objSearchPath
4053                }
4054                Else
4055                {
4056                    $objSearcherPath = New-Object System.DirectoryServices.DirectorySearcher ([ADSI] "LDAP://$($SchemaPath.replace("Schema","Extended-Rights"))")
4057                }
4058                $objSearcherPath.PageSize = $PageSize
4059                $objSearcherPath.CacheResults = $False
4060                $objSearcherPath.filter = "(objectClass=controlAccessRight)"
4061
4062                Try
4063                {
4064                    $RightsSearcher = $objSearcherPath.FindAll()
4065                }
4066                Catch
4067                {
4068                    Write-Output "[EXCEPTION] $($_.Exception.Message)"
4069                }
4070
4071                If ($RightsSearcher)
4072                {
4073                    $RightsSearcher | Where-Object {$_} | ForEach-Object {
4074                        # convert the GUID
4075                        $GUIDs[$_.properties.rightsguid[0].toString()] = $_.properties.name[0]
4076                    }
4077                    $RightsSearcher.dispose()
4078                }
4079                $objSearcherPath.dispose()
4080            }
4081            If ($UseAltCreds)
4082            {
4083                ForEach ($OU in $ADOUs)
4084                {
4085                    $OUPermissions += (New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($DCIP)/$($OU.Properties.distinguishedname)", $creds.UserName,$creds.GetNetworkCredential().Password).PsBase.ObjectSecurity.access | Select-Object @{name='organizationalUnit';expression={$OU.properties.distinguishedname}}, `
4086                       @{name='objectTypeName';expression={$GUIDs[$_.objectType.ToString()]}}, `
4087                       @{name='inheritedObjectTypeName';expression={$GUIDs[$_.inheritedObjectType.ToString()]}}, `
4088                       *
4089                }
4090            }
4091            Else
4092            {
4093                ForEach ($OU in $ADOUs)
4094                {
4095                $OUPermissions += (($OU.GetDirectoryEntry()).Get_ObjectSecurity()).Access | Select-Object @{name='organizationalUnit';expression={$OU.properties.distinguishedname}}, `
4096                       @{name='objectTypeName';expression={$GUIDs[$_.objectType.ToString()]}}, `
4097                       @{name='inheritedObjectTypeName';expression={$GUIDs[$_.inheritedObjectType.ToString()]}}, `
4098                       *
4099                }
4100            }
4101            Remove-Variable GUIDs
4102            Remove-Variable ADOUs
4103        }
4104    }
4105
4106    If ($OUPermissions)
4107    {
4108        Write-Verbose "[+] Domain OrganizationalUnits Permissions"
4109        $ADFileName = -join($ReportPath,'\','OUPermissions','.csv')
4110        Try
4111        {
4112            $OUPermissions | Export-Csv -Path $ADFileName -NoTypeInformation
4113        }
4114        Catch
4115        {
4116            Write-Output "Failed to Export CSV File"
4117            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4118        }
4119        Remove-Variable OUPermissions
4120        Remove-Variable ADFileName
4121    }
4122}
4123
4124Function Get-ADRADGPO
4125{
4126    param(
4127        [Parameter(Mandatory = $true)]
4128        [string] $Protocol,
4129
4130        [Parameter(Mandatory = $true)]
4131        [bool] $UseAltCreds,
4132
4133        [Parameter(Mandatory = $true)]
4134        [string] $ReportPath,
4135
4136        [Parameter(Mandatory = $false)]
4137        [DirectoryServices.DirectoryEntry] $objDomain,
4138
4139        [Parameter(Mandatory = $true)]
4140        [int] $PageSize
4141    )
4142
4143    Write-Output "[-] Domain GPOs"
4144    If ($Protocol -eq 'ADWS')
4145    {
4146        Try
4147        {
4148            $ADDomainGPOs = Get-ADObject -LDAPFilter '(objectCategory=groupPolicyContainer)' -Properties DisplayName,whenCreated,whenChanged,Name,gPCFileSysPath
4149        }
4150        Catch
4151        {
4152            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4153        }
4154
4155        If ($ADDomainGPOs)
4156        {
4157            Write-Output "[*] Total GPOs: $($ADDomainGPOs | Measure-Object | Select-Object -ExpandProperty Count)"
4158            $ADDomainGPOObj = @()
4159            $ADDomainGPOs | ForEach-Object {
4160                # Create the object for each instance.
4161                $Obj = New-Object PSObject
4162                $Obj | Add-Member -MemberType NoteProperty -Name DisplayName -Value $_.DisplayName
4163                $Obj | Add-Member -MemberType NoteProperty -Name Created -Value $_.whenCreated
4164                $Obj | Add-Member -MemberType NoteProperty -Name Changed -Value $_.whenChanged
4165                $Obj | Add-Member -MemberType NoteProperty -Name Name -Value $_.Name
4166                $Obj | Add-Member -MemberType NoteProperty -Name FilePath -Value $_.gPCFileSysPath
4167                $ADDomainGPOObj += $Obj
4168            }
4169            Remove-Variable ADDomainGPOs
4170        }
4171    }
4172
4173    If ($Protocol -eq 'LDAP')
4174    {
4175        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
4176        $ObjSearcher.PageSize = $PageSize
4177        $ObjSearcher.Filter = "(objectCategory=groupPolicyContainer)"
4178        $ObjSearcher.SearchScope = "Subtree"
4179
4180        Try
4181        {
4182            $ADDomainGPOs = $ObjSearcher.FindAll()
4183        }
4184        Catch
4185        {
4186            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4187        }
4188        $ObjSearcher.dispose()
4189
4190        If ($ADDomainGPOs)
4191        {
4192            Write-Output "[*] Total GPOs: $($ADDomainGPOs | Measure-Object | Select-Object -ExpandProperty Count)"
4193            $ADDomainGPOObj = @()
4194            $ADDomainGPOs | ForEach-Object {
4195                # Create the object for each instance.
4196                $Obj = New-Object PSObject
4197                $Obj | Add-Member -MemberType NoteProperty -Name DisplayName -Value ([string] $($_.Properties.displayname))
4198                $Obj | Add-Member -MemberType NoteProperty -Name Created -Value ([DateTime] $($_.Properties.whencreated))
4199                $Obj | Add-Member -MemberType NoteProperty -Name Changed -Value ([DateTime] $($_.Properties.whenchanged))
4200                $Obj | Add-Member -MemberType NoteProperty -Name Name -Value ([string] $($_.Properties.name))
4201                $Obj | Add-Member -MemberType NoteProperty -Name FilePath -Value ([string] $($_.Properties.gpcfilesyspath))
4202                $ADDomainGPOObj += $Obj
4203            }
4204            Remove-Variable ADDomainGPOs
4205        }
4206    }
4207
4208    If ($ADDomainGPOObj)
4209    {
4210        Write-Verbose "[+] Domain GPOs"
4211        $ADFileName = -join($ReportPath,'\','GPOs','.csv')
4212        Try
4213        {
4214            $ADDomainGPOObj | Export-Csv -Path $ADFileName -NoTypeInformation
4215        }
4216        Catch
4217        {
4218            Write-Output "Failed to Export CSV File"
4219            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4220        }
4221        Remove-Variable ADDomainGPOObj
4222        Remove-Variable ADFileName
4223    }
4224}
4225
4226Function Get-ADRADDNSZone
4227{
4228    param(
4229        [Parameter(Mandatory = $true)]
4230        [string] $Protocol,
4231
4232        [Parameter(Mandatory = $true)]
4233        [bool] $UseAltCreds,
4234
4235        [Parameter(Mandatory = $true)]
4236        [string] $ReportPath,
4237
4238        [Parameter(Mandatory = $false)]
4239        [DirectoryServices.DirectoryEntry] $objDomain,
4240
4241        [Parameter(Mandatory = $false)]
4242        [string] $DCIP,
4243
4244        [Parameter(Mandatory = $false)]
4245        [Management.Automation.PSCredential] $creds = [Management.Automation.PSCredential]::Empty,
4246
4247        [Parameter(Mandatory = $true)]
4248        [int] $PageSize
4249    )
4250
4251    Write-Output "[-] Domain DNS Zones"
4252    If ($Protocol -eq 'ADWS')
4253    {
4254        Try
4255        {
4256            $ADDNSZones = Get-ADObject -LDAPFilter '(objectClass=dnsZone)' -Property Name,whenCreated,whenChanged,DisplayName
4257        }
4258        Catch
4259        {
4260            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4261        }
4262
4263        If ($ADDNSZones)
4264        {
4265            Write-Output "[*] Total DNS Zones: $($ADDNSZones | Measure-Object | Select-Object -ExpandProperty Count)"
4266            $ADDNSZonesObj = @()
4267            $ADDNSNodesObj = @()
4268            $ADDNSZones | ForEach-Object {
4269                # Create the object for each instance.
4270                $Obj = New-Object PSObject
4271                $Obj | Add-Member -MemberType NoteProperty -Name Name -Value $_.Name
4272                $Obj | Add-Member -MemberType NoteProperty -Name Created -Value $_.whenCreated
4273                $Obj | Add-Member -MemberType NoteProperty -Name Changed -Value $_.whenChanged
4274                Try
4275                {
4276                    $DNSNodes = Get-ADObject -SearchBase $($_.DistinguishedName) -LDAPFilter '(objectClass=dnsNode)' -Property CanonicalName,DistinguishedName,dNSTombstoned,Name,ProtectedFromAccidentalDeletion,showInAdvancedViewOnly,whenChanged,whenCreated
4277                }
4278                Catch
4279                {
4280                    Write-Output "[EXCEPTION] $($_.Exception.Message)"
4281                }
4282                If ($DNSNodes)
4283                {
4284                    $Obj | Add-Member -MemberType NoteProperty -Name RecordCount -Value $($DNSNodes | Measure-Object | Select-Object -ExpandProperty Count)
4285                    $ADDNSNodesObj += $DNSNodes
4286                }
4287                Else
4288                {
4289                    $Obj | Add-Member -MemberType NoteProperty -Name RecordCount -Value $null
4290                }
4291                $Obj | Add-Member -MemberType NoteProperty -Name DisplayName -Value $_.DisplayName
4292                $ADDNSZonesObj += $Obj
4293            }
4294            Remove-Variable ADDNSZones
4295        }
4296    }
4297
4298    If ($Protocol -eq 'LDAP')
4299    {
4300        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
4301        $ObjSearcher.PageSize = $PageSize
4302        $ObjSearcher.Filter = "(objectCategory=dnsZone)"
4303        $ObjSearcher.SearchScope = "Subtree"
4304
4305        Try
4306        {
4307            $ADDNSZones = $ObjSearcher.FindAll()
4308        }
4309        Catch
4310        {
4311            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4312        }
4313        $ObjSearcher.dispose()
4314
4315        If ($ADDNSZones)
4316        {
4317            Write-Output "[*] Total DNS Zones: $($ADDNSZones | Measure-Object | Select-Object -ExpandProperty Count)"
4318            $ADDNSZonesObj = @()
4319            $ADDNSNodesObj = @()
4320            $ADDNSZones | ForEach-Object {
4321                Try
4322                {
4323                    If ($UseAltCreds)
4324                    {
4325                        $objSearchPath = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($DCIP)/$($_.Properties.distinguishedname)", $creds.UserName,$creds.GetNetworkCredential().Password
4326                    }
4327                    Else
4328                    {
4329                        $objSearchPath = New-Object System.DirectoryServices.DirectoryEntry "LDAP://$($_.Properties.distinguishedname)"
4330                    }
4331                    $objSearcherPath = New-Object System.DirectoryServices.DirectorySearcher $objSearchPath
4332                    $objSearcherPath.Filter = "(objectCategory=dnsNode)"
4333                    $objSearcherPath.PageSize = $PageSize
4334                    $objSearcherPath.PropertiesToLoad.AddRange(("canonicalname","distinguishedname","dnstombstoned","name","protectedfromaccidentaldeletion","showinadvancedviewonly","whenchanged","whencreated"))
4335                    $objSearcherPath.CacheResults = $False
4336                    $DNSNodes = $objSearcherPath.FindAll()
4337                    $objSearcherPath.dispose()
4338                    Remove-Variable objSearchPath
4339                    Remove-Variable objSearcherPath
4340                }
4341                Catch
4342                {
4343                    Write-Output "[EXCEPTION] $($_.Exception.Message)"
4344                }
4345
4346                # Create the object for each instance.
4347                $Obj = New-Object PSObject
4348                $Obj | Add-Member -MemberType NoteProperty -Name Name -Value ([string] $($_.Properties.name))
4349                $Obj | Add-Member -MemberType NoteProperty -Name Created -Value ([DateTime] $($_.Properties.whencreated))
4350                $Obj | Add-Member -MemberType NoteProperty -Name Changed -Value ([DateTime] $($_.Properties.whenchanged))
4351                If ($DNSNodes)
4352                {
4353                    $Obj | Add-Member -MemberType NoteProperty -Name RecordCount -Value $($DNSNodes | Measure-Object | Select-Object -ExpandProperty Count)
4354                    $ADDNSNodesObj += $DNSNodes
4355                }
4356                Else
4357                {
4358                    $Obj | Add-Member -MemberType NoteProperty -Name RecordCount -Value $null
4359                }
4360                If ($null -ne $_.Properties.displayname)
4361                {
4362                    $Obj | Add-Member -MemberType NoteProperty -Name DisplayName -Value ([string] $($_.Properties.displayname))
4363                }
4364                Else
4365                {
4366                    $Obj | Add-Member -MemberType NoteProperty -Name DisplayName -Value $null
4367                }
4368                $ADDNSZonesObj += $Obj
4369            }
4370            Remove-Variable ADDNSZones
4371        }
4372    }
4373
4374    If ($ADDNSZonesObj)
4375    {
4376        Write-Verbose "[+] Domain DNS Zones"
4377        $ADFileName = -join($ReportPath,'\','DNSZones','.csv')
4378        Try
4379        {
4380            $ADDNSZonesObj | Export-Csv -Path $ADFileName -NoTypeInformation
4381        }
4382        Catch
4383        {
4384            Write-Output "Failed to Export CSV File"
4385            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4386        }
4387        Remove-Variable ADDNSZonesObj
4388        Remove-Variable ADFileName
4389    }
4390
4391    If ($ADDNSNodesObj)
4392    {
4393        Write-Verbose "[+] Domain DNS Nodes"
4394        $ADFileName = -join($ReportPath,'\','DNSNodes','.csv')
4395        Try
4396        {
4397            $ADDNSNodesObj | Export-Csv -Path $ADFileName -NoTypeInformation
4398        }
4399        Catch
4400        {
4401            Write-Output "Failed to Export CSV File"
4402            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4403        }
4404        Remove-Variable ADDNSNodesObj
4405        Remove-Variable ADFileName
4406    }
4407}
4408
4409Function Get-ADRADPrinter
4410{
4411    param(
4412        [Parameter(Mandatory = $true)]
4413        [string] $Protocol,
4414
4415        [Parameter(Mandatory = $true)]
4416        [bool] $UseAltCreds,
4417
4418        [Parameter(Mandatory = $true)]
4419        [string] $ReportPath,
4420
4421        [Parameter(Mandatory = $false)]
4422        [DirectoryServices.DirectoryEntry] $objDomain,
4423
4424        [Parameter(Mandatory = $true)]
4425        [int] $PageSize
4426    )
4427
4428    Write-Output "[-] Domain Printers"
4429    If ($Protocol -eq 'ADWS')
4430    {
4431        Try
4432        {
4433            $ADPrinters = Get-ADObject -LDAPFilter '(objectCategory=printQueue)' -Properties serverName,printShareName,driverName,driverVersion,portName,url,whenCreated,whenChanged,Name
4434        }
4435        Catch
4436        {
4437            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4438        }
4439
4440        If ($ADPrinters)
4441        {
4442            $cnt = $($ADPrinters | Measure-Object | Select-Object -ExpandProperty Count)
4443            If ($cnt -ge 1)
4444            {
4445                Write-Output "[*] Total Printers: $cnt"
4446                $ADPrintersObj = @()
4447                $ADPrinters | ForEach-Object {
4448                    # Create the object for each instance.
4449                    $Obj = New-Object PSObject
4450                    $Obj | Add-Member -MemberType NoteProperty -Name Name -Value $_.Name
4451                    $Obj | Add-Member -MemberType NoteProperty -Name ServerName -Value $_.serverName
4452                    $Obj | Add-Member -MemberType NoteProperty -Name ShareName -Value ([string]($_.printShareName))
4453                    $Obj | Add-Member -MemberType NoteProperty -Name DriverName -Value $_.driverName
4454                    $Obj | Add-Member -MemberType NoteProperty -Name DriverVersion -Value $_.driverVersion
4455                    $Obj | Add-Member -MemberType NoteProperty -Name PortName -Value ([string]($_.portName))
4456                    $Obj | Add-Member -MemberType NoteProperty -Name URL -Value ([string]($_.url))
4457                    $Obj | Add-Member -MemberType NoteProperty -Name Created -Value $_.whenCreated
4458                    $Obj | Add-Member -MemberType NoteProperty -Name Changed -Value $_.whenChanged
4459                    $ADPrintersObj += $Obj
4460                }
4461            }
4462            Remove-Variable ADPrinters
4463        }
4464    }
4465
4466    If ($Protocol -eq 'LDAP')
4467    {
4468        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
4469        $ObjSearcher.PageSize = $PageSize
4470        $ObjSearcher.Filter = "(objectCategory=printQueue)"
4471        $ObjSearcher.SearchScope = "Subtree"
4472
4473        Try
4474        {
4475            $ADPrinters = $ObjSearcher.FindAll()
4476        }
4477        Catch
4478        {
4479            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4480        }
4481        $ObjSearcher.dispose()
4482
4483        If ($ADPrinters)
4484        {
4485            $cnt = $($ADPrinters | Measure-Object | Select-Object -ExpandProperty Count)
4486            If ($cnt -ge 1)
4487            {
4488                Write-Output "[*] Total Printers: $cnt"
4489                $ADPrintersObj = @()
4490                $ADPrinters | ForEach-Object {
4491                    # Create the object for each instance.
4492                    $Obj = New-Object PSObject
4493                    $Obj | Add-Member -MemberType NoteProperty -Name Name -Value ([string] $($_.Properties.name))
4494                    $Obj | Add-Member -MemberType NoteProperty -Name ServerName -Value ([string] $($_.Properties.servername))
4495                    $Obj | Add-Member -MemberType NoteProperty -Name ShareName -Value ([string] $($_.Properties.printsharename))
4496                    $Obj | Add-Member -MemberType NoteProperty -Name DriverName -Value ([string] $($_.Properties.drivername))
4497                    $Obj | Add-Member -MemberType NoteProperty -Name DriverVersion -Value ([string] $($_.Properties.driverversion))
4498                    $Obj | Add-Member -MemberType NoteProperty -Name PortName -Value ([string] $($_.Properties.portname))
4499                    $Obj | Add-Member -MemberType NoteProperty -Name URL -Value ([string] $($_.Properties.url))
4500                    $Obj | Add-Member -MemberType NoteProperty -Name Created -Value ([DateTime] $($_.Properties.whencreated))
4501                    $Obj | Add-Member -MemberType NoteProperty -Name Changed -Value ([DateTime] $($_.Properties.whenchanged))
4502                    $ADPrintersObj += $Obj
4503                }
4504            }
4505            Remove-Variable ADPrinters
4506        }
4507    }
4508
4509
4510    If ($ADPrintersObj)
4511    {
4512        Write-Verbose "[+] Domain Printers"
4513        $ADFileName = -join($ReportPath,'\','Printers','.csv')
4514        Try
4515        {
4516            $ADPrintersObj | Export-Csv -Path $ADFileName -NoTypeInformation
4517        }
4518        Catch
4519        {
4520            Write-Output "Failed to Export CSV File"
4521            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4522        }
4523        Remove-Variable ADPrintersObj
4524        Remove-Variable ADFileName
4525    }
4526}
4527
4528Function Get-ADRADComputer
4529{
4530    param(
4531        [Parameter(Mandatory = $true)]
4532        [string] $Protocol,
4533
4534        [Parameter(Mandatory = $true)]
4535        [bool] $UseAltCreds,
4536
4537        [Parameter(Mandatory = $true)]
4538        [string] $ReportPath,
4539
4540        [Parameter(Mandatory = $true)]
4541        [DateTime] $date,
4542
4543        [Parameter(Mandatory = $false)]
4544        [DirectoryServices.DirectoryEntry] $objDomain,
4545
4546        [Parameter(Mandatory = $true)]
4547        [int] $PageSize,
4548
4549        [Parameter(Mandatory = $false)]
4550        [int] $Threads = 10,
4551
4552        [Parameter(Mandatory = $false)]
4553        [int] $FlushCount = -1
4554    )
4555
4556    Write-Output "[-] Domain Computers - May take some time"
4557    If ($Protocol -eq 'ADWS')
4558    {
4559        Try
4560        {
4561            $ADComputers = Get-ADComputer -Filter * -ResultPageSize $PageSize -Properties Name,DNSHostName,Description,Enabled,IPv4Address,OperatingSystem,LastLogonDate,PasswordLastSet,primaryGroupID,TrustedForDelegation,TrustedToAuthForDelegation,SamAccountName,whenChanged,whenCreated,DistinguishedName
4562        }
4563        Catch
4564        {
4565            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4566        }
4567
4568        If ($ADComputers)
4569        {
4570            $ADFileName  = -join($ReportPath,'\','Computers','.csv')
4571            $ComputerCount = [ADRecon.ADWSClass]::ComputerParser($ADComputers, $date, $ADFileName, $Threads, $FlushCount)
4572            # Temporary solution for exception in [ADRecon.ADWSClass]::ComputerParser
4573            # System.InvalidCastException: Unable to cast object of type 'Microsoft.ActiveDirectory.Management.ADComputer' to type 'System.Management.Automation.PSObject'.
4574            If ($ComputerCount -eq 1)
4575            {
4576                $ADComputers | ForEach-Object {
4577                    $Obj = New-Object PSObject
4578                    $Obj | Add-Member -MemberType NoteProperty -Name Name -Value $($_.Name)
4579                    $Obj | Add-Member -MemberType NoteProperty -Name DNSHostName -Value $($_.DNSHostName)
4580                    $Obj | Add-Member -MemberType NoteProperty -Name Enabled -Value $($_.Enabled)
4581                    $Obj | Add-Member -MemberType NoteProperty -Name IPv4Address -Value $($_.IPv4Address)
4582                    If ($null -ne $_.OperatingSystem)
4583                    {
4584                        $Obj | Add-Member -MemberType NoteProperty -Name OperatingSystem -Value $($_.OperatingSystem)
4585                    }
4586                    Else
4587                    {
4588                        $Obj | Add-Member -MemberType NoteProperty -Name OperatingSystem -Value "-"
4589                    }
4590                    If ($null -eq $_.LastLogonDate)
4591                    {
4592                        $Obj | Add-Member -MemberType NoteProperty -Name "Days Since Last Logon" -Value "-"
4593                    }
4594                    Else
4595                    {
4596                        $DDiff = (Get-DayDiff $_.LastLogonDate $date).Days
4597                        $Obj | Add-Member -MemberType NoteProperty -Name "Days Since Last Logon" -Value $DDiff
4598                    }
4599                    If ($null -eq $_.PasswordLastSet)
4600                    {
4601                        $Obj | Add-Member -MemberType NoteProperty -Name "Days Since Last Password Change" -Value "-"
4602                    }
4603                    Else
4604                    {
4605                        $DDiff = (Get-DayDiff $_.PasswordLastSet $date).Days
4606                        $Obj | Add-Member -MemberType NoteProperty -Name "Days Since Last Password Change" -Value $DDiff
4607                    }
4608                    $Obj | Add-Member -MemberType NoteProperty -Name "Trusted for Delegation" -Value $($_.TrustedForDelegation)
4609                    $Obj | Add-Member -MemberType NoteProperty -Name "Trusted to Auth for Delegation" -Value $($_.TrustedToAuthForDelegation)
4610                    $Obj | Add-Member -MemberType NoteProperty -Name "Username" -Value $($_.SamAccountName)
4611                    $Obj | Add-Member -MemberType NoteProperty -Name "Primary Group ID" -Value $($_.primaryGroupID)
4612                    $Obj | Add-Member -MemberType NoteProperty -Name "Description" -Value $($_.Description)
4613                    If ($null -eq $_.PasswordLastSet)
4614                    {
4615                        $Obj | Add-Member -MemberType NoteProperty -Name "Password LastSet" -Value "-"
4616                    }
4617                    Else
4618                    {
4619                        $Obj | Add-Member -MemberType NoteProperty -Name "Password LastSet" -Value $($_.PasswordLastSet)
4620                    }
4621                    If ($null -eq $_.LastLogonDate)
4622                    {
4623                        $Obj | Add-Member -MemberType NoteProperty -Name "Last Logon Date" -Value "-"
4624                    }
4625                    Else
4626                    {
4627                        $Obj | Add-Member -MemberType NoteProperty -Name "Last Logon Date" -Value $($_.LastLogonDate)
4628                    }
4629                    $Obj | Add-Member -MemberType NoteProperty -Name "whenCreated" -Value $($_.whenCreated)
4630                    $Obj | Add-Member -MemberType NoteProperty -Name "whenChanged" -Value $($_.whenChanged)
4631                    $Obj | Add-Member -MemberType NoteProperty -Name 'Distinguished Name' -Value $($_.DistinguishedName)
4632                    Try
4633                    {
4634                        $Obj | Export-Csv -Path $ADFileName -NoTypeInformation
4635                    }
4636                    Catch
4637                    {
4638                        Write-Output "[ERROR] Failed to Export CSV File"
4639                        Write-Output "[EXCEPTION] $($_.Exception.Message)"
4640                    }
4641                }
4642            }
4643            Remove-Variable ADComputers
4644            Write-Verbose "[+] Domain Computers"
4645        }
4646    }
4647
4648    If ($Protocol -eq 'LDAP')
4649    {
4650        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
4651        $ObjSearcher.PageSize = $PageSize
4652        $ObjSearcher.Filter = "(samAccountType=805306369)"
4653        $ObjSearcher.PropertiesToLoad.AddRange(("description","name","pwdlastset","useraccountcontrol","samaccountname","dnshostname","lastlogontimestamp","primarygroupid","whenchanged","whencreated","operatingsystem","distinguishedname"))
4654        $ObjSearcher.SearchScope = "Subtree"
4655
4656        Try
4657        {
4658            $ADComputers = $ObjSearcher.FindAll()
4659        }
4660        Catch
4661        {
4662            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4663            Return $null
4664        }
4665        $ObjSearcher.dispose()
4666
4667        If ($ADComputers)
4668        {
4669            $ADFileName  = -join($ReportPath,'\','Computers','.csv')
4670            [ADRecon.LDAPClass]::ComputerParser($ADComputers, $date, $ADFileName, $Threads, $FlushCount)
4671            Remove-Variable ADComputers
4672            Write-Verbose "[+] Domain Computers"
4673        }
4674    }
4675}
4676
4677Function Get-ADRADComputerSPN
4678{
4679    param(
4680        [Parameter(Mandatory = $true)]
4681        [string] $Protocol,
4682
4683        [Parameter(Mandatory = $true)]
4684        [bool] $UseAltCreds,
4685
4686        [Parameter(Mandatory = $true)]
4687        [string] $ReportPath,
4688
4689        [Parameter(Mandatory = $false)]
4690        [DirectoryServices.DirectoryEntry] $objDomain,
4691
4692        [Parameter(Mandatory = $true)]
4693        [int] $PageSize,
4694
4695        [Parameter(Mandatory = $false)]
4696        [int] $Threads = 10,
4697
4698        [Parameter(Mandatory = $false)]
4699        [int] $FlushCount = -1
4700    )
4701
4702    Write-Output "[-] Domain Computer SPNs"
4703    If ($Protocol -eq 'ADWS')
4704    {
4705        Try
4706        {
4707            $ADComputers = Get-ADObject -LDAPFilter "(&(objectClass=computer)(servicePrincipalName=*))" -Properties name,dnshostname,servicePrincipalName -ResultPageSize $PageSize
4708        }
4709        Catch
4710        {
4711            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4712        }
4713
4714        If ($ADComputers)
4715        {
4716            $ADFileName = -join($ReportPath,'\','ComputerSPNs','.csv')
4717            $ComputerSPNCount = [ADRecon.ADWSClass]::ComputerSPNParser($ADComputers, $ADFileName, $Threads, $FlushCount)
4718            # Temporary solution for exception in [ADRecon.ADWSClass]::ComputerSPNParser
4719            # System.InvalidCastException: Unable to cast object of type 'Microsoft.ActiveDirectory.Management.ADComputer' to type 'System.Management.Automation.PSObject'.
4720            If ($ComputerSPNCount -eq 1)
4721            {
4722                $CompSPNObj = @()
4723                $ADComputers | ForEach-Object {
4724                    For($i=0; $i -lt $_.servicePrincipalName.count; $i++)
4725                    {
4726                        $Obj = New-Object PSObject
4727                        [array] $SPNObjectArray = $_.servicePrincipalName[$i] -Split("/")
4728                        $Obj | Add-Member -MemberType NoteProperty -Name "Name" -Value $_.Name
4729                        $Obj | Add-Member -MemberType NoteProperty -Name "Service" -Value $SPNObjectArray[0]
4730                        $Obj | Add-Member -MemberType NoteProperty -Name "Host" -Value $SPNObjectArray[1]
4731                        $CompSPNObj += $Obj
4732                        Remove-Variable SPNObjectArray
4733                    }
4734                }
4735                If ($CompSPNObj)
4736                {
4737                    $ADFileName = -join($ReportPath,'\','ComputerSPNs','.csv')
4738                    Try
4739                    {
4740                        $CompSPNObj | Export-Csv -Path $ADFileName -NoTypeInformation
4741                    }
4742                    Catch
4743                    {
4744                        Write-Output "Failed to Export CSV File"
4745                        Write-Output "[EXCEPTION] $($_.Exception.Message)"
4746                    }
4747                }
4748            }
4749            Remove-Variable ADComputers
4750            Write-Verbose "[+] Domain Computer SPNs"
4751        }
4752    }
4753
4754    If ($Protocol -eq 'LDAP')
4755    {
4756        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
4757        $ObjSearcher.PageSize = $PageSize
4758        $ObjSearcher.Filter = "(&(objectClass=computer)(servicePrincipalName=*))"
4759        $ObjSearcher.PropertiesToLoad.AddRange(("name","samaccountname","serviceprincipalname","pwdlastset","description"))
4760        $ObjSearcher.SearchScope = "Subtree"
4761        Try
4762        {
4763            $ADComputers = $ObjSearcher.FindAll()
4764        }
4765        Catch
4766        {
4767            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4768            Return $null
4769        }
4770        $ObjSearcher.dispose()
4771
4772        If ($ADComputers)
4773        {
4774            $ADFileName = -join($ReportPath,'\','ComputerSPNs','.csv')
4775            [ADRecon.LDAPClass]::ComputerSPNParser($ADComputers, $ADFileName, $Threads, $FlushCount)
4776            Remove-Variable ADComputers
4777            Write-Verbose "[+] Domain Computer SPNs"
4778        }
4779    }
4780}
4781
4782Function Get-ADRADLAPSCheck
4783{
4784    param(
4785        [Parameter(Mandatory = $true)]
4786        [string] $Protocol,
4787
4788        [Parameter(Mandatory = $true)]
4789        [bool] $UseAltCreds,
4790
4791        [Parameter(Mandatory = $true)]
4792        [string] $ReportPath,
4793
4794        [Parameter(Mandatory = $false)]
4795        [DirectoryServices.DirectoryEntry] $objDomain,
4796
4797        [Parameter(Mandatory = $true)]
4798        [int] $PageSize
4799    )
4800
4801    Write-Output "[-] LAPS - Needs Privileged Account"
4802    # based on https://github.com/kfosaaen/Get-LAPSPasswords/blob/master/Get-LAPSPasswords.ps1
4803    If ($Protocol -eq 'ADWS')
4804    {
4805        Try
4806        {
4807            $ADComputers = Get-ADObject -LDAPFilter "(objectClass=computer)" -Properties cn,dnshostname,'ms-mcs-admpwd','ms-mcs-admpwdexpirationtime' -ResultPageSize $PageSize
4808        }
4809        Catch [System.ArgumentException]
4810        {
4811            Write-Output "[*] LAPS is not implemented."
4812            $LAPS = $false
4813        }
4814        Catch
4815        {
4816            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4817        }
4818
4819        If ($ADComputers -and $LAPS -ne $false)
4820        {
4821            $LAPSObj = @()
4822            $ADComputers | ForEach-Object {
4823                [string] $CurrentPassword = $_.'ms-mcs-admpwd'
4824                If ($_.'ms-mcs-admpwdexpirationtime' -ge 0)
4825                {
4826                    $CurrentExpiration = [dateTime]::FromFileTime("$($_.'ms-mcs-admpwdexpirationtime')")
4827                }
4828                Else
4829                {
4830                    $CurrentExpiration = "NA"
4831                }
4832                $PasswordAvailable = $false
4833                $PasswordStored = $true
4834                If ($CurrentPassword.length -ge 1)
4835                {
4836                    $PasswordAvailable = $true
4837                }
4838                If ($CurrentExpiration -eq "NA")
4839                {
4840                    $PasswordStored = $false
4841                    $PasswordAvailable = "NA"
4842                    $CurrentPassword = $null
4843                }
4844                If ($null -ne $_.dnshostname)
4845                {
4846                    $CurrentHostname = $_.dnshostname
4847                }
4848                Else
4849                {
4850                    $CurrentHostname = $_.cn
4851                }
4852                # Create the object for each instance.
4853                $Obj = New-Object PSObject
4854                $Obj | Add-Member -MemberType NoteProperty -Name Hostname -Value $CurrentHostname
4855                $Obj | Add-Member -MemberType NoteProperty -Name Stored -Value $PasswordStored
4856                $Obj | Add-Member -MemberType NoteProperty -Name Readable -Value $PasswordAvailable
4857                $Obj | Add-Member -MemberType NoteProperty -Name Password -Value $CurrentPassword
4858                $Obj | Add-Member -MemberType NoteProperty -Name Expiration -Value $CurrentExpiration
4859                $LAPSObj += $Obj
4860                Remove-Variable CurrentHostname
4861                Remove-Variable PasswordStored
4862                Remove-Variable PasswordAvailable
4863                Remove-Variable CurrentPassword
4864                Remove-Variable CurrentExpiration
4865            }
4866            Remove-Variable ADComputers
4867        }
4868    }
4869
4870    If ($Protocol -eq 'LDAP')
4871    {
4872        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
4873        $ObjSearcher.PageSize = $PageSize
4874        $ObjSearcher.Filter = "(objectClass=computer)"
4875        $ObjSearcher.PropertiesToLoad.AddRange(("cn","dnshostname","ms-mcs-admpwdexpirationtime","ms-mcs-admpwd"))
4876        $ObjSearcher.SearchScope = "Subtree"
4877        Try
4878        {
4879            $ADComputers = $ObjSearcher.FindAll()
4880        }
4881        Catch
4882        {
4883            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4884            Return $null
4885        }
4886        $ObjSearcher.dispose()
4887
4888        If ($($ADComputers | ForEach-Object {$_.Properties.'ms-mcs-admpwdexpirationtime'} | Measure-Object | Select-Object -ExpandProperty Count) -eq 0)
4889        {
4890            Write-Output "[*] LAPS is not implemented."
4891        }
4892        Else
4893        {
4894            $LAPSObj = @()
4895            $ADComputers | ForEach-Object {
4896                [string] $CurrentPassword = $_.properties.'ms-mcs-admpwd'
4897                If ($_.properties.'ms-mcs-admpwdexpirationtime' -ge 0)
4898                {
4899                    $CurrentExpiration = [dateTime]::FromFileTime("$($_.properties.'ms-mcs-admpwdexpirationtime')")
4900                }
4901                Else
4902                {
4903                    $CurrentExpiration = "NA"
4904                }
4905                $PasswordAvailable = $false
4906                $PasswordStored = $true
4907                If ($CurrentPassword.length -ge 1)
4908                {
4909                    $PasswordAvailable = $true
4910                }
4911                If ($CurrentExpiration -eq "NA")
4912                {
4913                    $PasswordStored = $false
4914                    $PasswordAvailable = "NA"
4915                    $CurrentPassword = $null
4916                }
4917                If ($null -ne $_.properties.dnshostname)
4918                {
4919                    $CurrentHostname = ([string] $($_.properties.dnshostname))
4920                }
4921                Else
4922                {
4923                    $CurrentHostname = ([string] $($_.properties.cn))
4924                }
4925                # Create the object for each instance.
4926                $Obj = New-Object PSObject
4927                $Obj | Add-Member -MemberType NoteProperty -Name Hostname -Value $CurrentHostname
4928                $Obj | Add-Member -MemberType NoteProperty -Name Stored -Value $PasswordStored
4929                $Obj | Add-Member -MemberType NoteProperty -Name Readable -Value $PasswordAvailable
4930                $Obj | Add-Member -MemberType NoteProperty -Name Password -Value $CurrentPassword
4931                $Obj | Add-Member -MemberType NoteProperty -Name Expiration -Value $CurrentExpiration
4932                $LAPSObj += $Obj
4933                Remove-Variable CurrentHostname
4934                Remove-Variable PasswordStored
4935                Remove-Variable PasswordAvailable
4936                Remove-Variable CurrentPassword
4937                Remove-Variable CurrentExpiration
4938            }
4939            Remove-Variable ADComputers
4940        }
4941    }
4942
4943    If ($LAPSObj)
4944    {
4945        Write-Verbose "[+] LAPS"
4946        $ADFileName = -join($ReportPath,'\','LAPS','.csv')
4947        Try
4948        {
4949            $LAPSObj | Export-Csv -Path $ADFileName -NoTypeInformation
4950        }
4951        Catch
4952        {
4953            Write-Output "Failed to Export CSV File"
4954            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4955        }
4956        Remove-Variable LAPSObj
4957        Remove-Variable ADFileName
4958    }
4959}
4960
4961Function Get-ADRADBitLocker
4962{
4963    param(
4964        [Parameter(Mandatory = $true)]
4965        [string] $Protocol,
4966
4967        [Parameter(Mandatory = $true)]
4968        [bool] $UseAltCreds,
4969
4970        [Parameter(Mandatory = $true)]
4971        [string] $ReportPath,
4972
4973        [Parameter(Mandatory = $false)]
4974        [DirectoryServices.DirectoryEntry] $objDomain
4975    )
4976
4977    Write-Output "[-] BitLocker Recovery Keys - Needs Privileged Account"
4978    If ($Protocol -eq 'ADWS')
4979    {
4980        Try
4981        {
4982            $ADBitLockerRecoveryKeys = Get-ADObject -LDAPFilter '(objectClass=msFVE-RecoveryInformation)' -Properties distinguishedName,msFVE-RecoveryPassword
4983        }
4984        Catch
4985        {
4986            Write-Output "[EXCEPTION] $($_.Exception.Message)"
4987        }
4988
4989        If ($ADBitLockerRecoveryKeys)
4990        {
4991            $cnt = $($ADBitLockerRecoveryKeys | Measure-Object | Select-Object -ExpandProperty Count)
4992            If ($cnt -ge 1)
4993            {
4994                Write-Output "[*] Total BitLocker Recovery Keys: $cnt"
4995                $BitLockerObj = @()
4996                $ADBitLockerRecoveryKeys | ForEach-Object {
4997                    # Create the object for each instance.
4998                    $Obj = New-Object PSObject
4999                    $Obj | Add-Member -MemberType NoteProperty -Name "Distinguished Name" -Value $_.distinguishedName
5000                    $Obj | Add-Member -MemberType NoteProperty -Name "Recovery Password" -Value $_.'msFVE-RecoveryPassword'
5001                    $BitLockerObj += $Obj
5002                }
5003            }
5004            Remove-Variable ADBitLockerRecoveryKeys
5005        }
5006    }
5007
5008    If ($Protocol -eq 'LDAP')
5009    {
5010        $objSearcher = New-Object System.DirectoryServices.DirectorySearcher $objDomain
5011        $ObjSearcher.PageSize = $PageSize
5012        $ObjSearcher.Filter = "(objectClass=msFVE-RecoveryInformation)"
5013        $ObjSearcher.SearchScope = "Subtree"
5014
5015        Try
5016        {
5017            $ADBitLockerRecoveryKeys = $ObjSearcher.FindAll()
5018        }
5019        Catch
5020        {
5021            Write-Output "[EXCEPTION] $($_.Exception.Message)"
5022        }
5023        $ObjSearcher.dispose()
5024
5025        If ($ADBitLockerRecoveryKeys)
5026        {
5027            $cnt = $($ADBitLockerRecoveryKeys | Measure-Object | Select-Object -ExpandProperty Count)
5028            If ($cnt -ge 1)
5029            {
5030                Write-Output "[*] Total BitLocker Recovery Keys: $cnt"
5031                $BitLockerObj = @()
5032                $ADBitLockerRecoveryKeys | ForEach-Object {
5033                    # Create the object for each instance.
5034                    $Obj = New-Object PSObject
5035                    $Obj | Add-Member -MemberType NoteProperty -Name "Distinguished Name" -Value ([string]($_.Properties.distinguishedname))
5036                    $Obj | Add-Member -MemberType NoteProperty -Name "Recovery Password" -Value $_.Properties.'msfve-recoverypassword'
5037                    $BitLockerObj += $Obj
5038                }
5039            }
5040            Remove-Variable cnt
5041            Remove-Variable ADBitLockerRecoveryKeys
5042        }
5043    }
5044
5045    If ($BitLockerObj)
5046    {
5047        Write-Verbose "[+] BitLocker Recovery Keys"
5048        $ADFileName = -join($ReportPath,'\','BitLockerRecoveryKeys','.csv')
5049        Try
5050        {
5051            $BitLockerObj | Export-Csv -Path $ADFileName -NoTypeInformation
5052        }
5053        Catch
5054        {
5055            Write-Output "Failed to Export CSV File"
5056            Write-Output "[EXCEPTION] $($_.Exception.Message)"
5057        }
5058        Remove-Variable BitLockerObj
5059        Remove-Variable ADFileName
5060    }
5061}
5062
5063Function Invoke-ADRecon
5064{
5065    param(
5066        [Parameter(Mandatory = $false)]
5067        [string] $GenExcel,
5068
5069        [Parameter(Mandatory = $true)]
5070        [string] $Protocol,
5071
5072        [Parameter(Mandatory = $true)]
5073        [array] $Collect,
5074
5075        [Parameter(Mandatory = $false)]
5076        [string] $DCIP,
5077
5078        [Parameter(Mandatory = $false)]
5079        [Management.Automation.PSCredential] $creds = [Management.Automation.PSCredential]::Empty,
5080
5081        [Parameter(Mandatory = $true)]
5082        [int] $DormantTimeSpan = 90,
5083
5084        [Parameter(Mandatory = $true)]
5085        [int] $PageSize = 200,
5086
5087        [Parameter(Mandatory = $true)]
5088        [int] $Threads = 10,
5089
5090        [Parameter(Mandatory = $true)]
5091        [int] $FlushCount = -1,
5092
5093        [Parameter(Mandatory = $false)]
5094        [bool] $UseAltCreds = $false
5095    )
5096
5097    [string] $ADReconVersion = "v171204"
5098    Write-Output "[*] ADRecon $ADReconVersion by Prashant Mahajan (@prashant3535) from Sense of Security."
5099
5100    If ($GenExcel)
5101    {
5102        If (!(Test-Path $GenExcel))
5103        {
5104            Write-Output "[ERROR] Invalid Path ... Exiting"
5105            Return $null
5106        }
5107        Get-ADRGenExcel $GenExcel
5108        Return $null
5109    }
5110
5111    Try
5112    {
5113        If ($PSVersionTable.PSVersion.Major -ne 2)
5114        {
5115            $computer = Get-CimInstance -ClassName Win32_ComputerSystem
5116            $computerdomainrole = ($computer).DomainRole
5117        }
5118        Else
5119        {
5120            $computer = Get-WMIObject win32_computersystem
5121            $computerdomainrole = ($computer).DomainRole
5122        }
5123    }
5124    Catch
5125    {
5126        Write-Output "[EXCEPTION] $($_.Exception.Message)"
5127    }
5128
5129    switch ($computerdomainrole)
5130    {
5131        0
5132        {
5133            [string] $computerrole = "Standalone Workstation"
5134            $Env:ADPS_LoadDefaultDrive = 0
5135            $UseAltCreds = $true
5136        }
5137        1 { [string] $computerrole = "Member Workstation" }
5138        2
5139        {
5140            [string] $computerrole = "Standalone Server"
5141            $UseAltCreds = $true
5142            $Env:ADPS_LoadDefaultDrive = 0
5143        }
5144        3 { [string] $computerrole = "Member Server" }
5145        4 { [string] $computerrole = "Backup Domain Controller" }
5146        5 { [string] $computerrole = "Primary Domain Controller" }
5147        default { Write-Output "Computer Role could not be identified." }
5148    }
5149
5150    If (($DCIP -ne "") -or ($creds -ne [Management.Automation.PSCredential]::Empty))
5151    {
5152        $UseAltCreds = $true
5153    }
5154
5155    If ($Protocol -eq 'ADWS')
5156    {
5157        Try
5158        {
5159            Import-Module ActiveDirectory -WarningAction Stop -ErrorAction Stop | Out-Null
5160        }
5161        Catch
5162        {
5163            Write-Warning "ActiveDirectory Module from RSAT (Remote Server Administration Tools) is not installed. ... Continuing with LDAP"
5164            $Protocol = 'LDAP'
5165        }
5166    }
5167
5168    Try
5169    {
5170        $CLR4 = ([System.Reflection.Assembly]::GetExecutingAssembly().ImageRuntimeVersion)[1]
5171        If ($Protocol -eq 'ADWS')
5172        {
5173            If ($CLR4 -eq "4")
5174            {
5175                Add-Type -TypeDefinition $ADWSSource -ReferencedAssemblies ([system.reflection.assembly]::LoadWithPartialName("Microsoft.ActiveDirectory.Management")).Location
5176            }
5177            Else
5178            {
5179                Add-Type -TypeDefinition $ADWSSource -ReferencedAssemblies ([system.reflection.assembly]::LoadWithPartialName("Microsoft.ActiveDirectory.Management")).Location -Language CSharpVersion3
5180            }
5181        }
5182
5183        If ($Protocol -eq 'LDAP')
5184        {
5185            If ($CLR4 -eq "4")
5186            {
5187                Add-Type -TypeDefinition $LDAPSource -ReferencedAssemblies ([system.reflection.assembly]::LoadWithPartialName("System.DirectoryServices")).Location
5188            }
5189            Else
5190            {
5191                Add-Type -TypeDefinition $LDAPSource -ReferencedAssemblies ([system.reflection.assembly]::LoadWithPartialName("System.DirectoryServices")).Location -Language CSharpVersion3
5192            }
5193            # Allow running using RUNAS from a non-domain joined machine
5194            # runas /user:<Domain FQDN>\<Username> /netonly powershell.exe
5195            If (($DCIP -eq "") -and ($creds -eq [Management.Automation.PSCredential]::Empty))
5196            {
5197                Try
5198                {
5199                    $objDomain = [ADSI]""
5200                    $UseAltCreds = $false
5201                    $objDomain.Dispose()
5202                }
5203                Catch
5204                {
5205                    $UseAltCreds = $true
5206                }
5207            }
5208        }
5209    }
5210    Catch
5211    {
5212        Write-Output "[ERROR] $($_.Exception.Message)"
5213        Return $null
5214    }
5215
5216    If ($UseAltCreds -and (($DCIP -eq "") -or ($creds -eq [Management.Automation.PSCredential]::Empty)))
5217    {
5218        If (($DCIP -ne "") -and ($creds -eq [Management.Automation.PSCredential]::Empty))
5219        {
5220            Try
5221            {
5222                $creds = Get-Credential
5223            }
5224            Catch
5225            {
5226                Write-Output "[ERROR] $($_.Exception.Message)"
5227                Return $null
5228            }
5229        }
5230        Else
5231        {
5232            Write-Output "Run Get-Help .\ADRecon.ps1 -Examples for additional information."
5233            Write-Output "[ERROR] Use the -DomainController and -Credential parameter."`n
5234            Return $null
5235        }
5236    }
5237
5238    Write-Output $computerrole
5239    Write-Output ($computer).domain
5240
5241    Remove-Variable computer
5242    Remove-Variable computerdomainrole
5243
5244    Get-ADRLogin $Protocol $UseAltCreds $Collect $computerrole $ADReconVersion $DCIP $creds $DormantTimeSpan $PageSize $Threads $FlushCount
5245
5246    Remove-Variable ADReconVersion
5247    Remove-Variable computerrole
5248}
5249
5250Invoke-ADRecon $GenExcel $Protocol $Collect $DomainController $Credential $DormantTimeSpan $PageSize $Threads $FlushCount