feat: configuration class collection

SpecterOps · Oct 25, 2023 · 39eb150 · 39eb150
1 parent fd82e42
commit 39eb150
Show file tree

Hide file tree

Showing 6 changed files with 19 additions and 0 deletions.
diff --git a/src/CommonLib/Enums/Labels.cs b/src/CommonLib/Enums/Labels.cs
@@ -12,6 +12,7 @@ public enum Label
         Domain,
         OU,
         Container,
+        Configuration,
         CertTemplate,
         CertAuthority,
         RootCA,

diff --git a/src/CommonLib/Extensions.cs b/src/CommonLib/Extensions.cs
@@ -369,6 +369,8 @@ public static Label GetLabel(this SearchResultEntry entry)
                     objectType = Label.Domain;
                 else if (objectClasses.Contains(ContainerClass, StringComparer.InvariantCultureIgnoreCase))
                     objectType = Label.Container;
+                else if (objectClasses.Contains(ConfigurationClass, StringComparer.InvariantCultureIgnoreCase))
+                    objectType = Label.Configuration;
                 else if (objectClasses.Contains(PKICertificateTemplateClass, StringComparer.InvariantCultureIgnoreCase))
                     objectType = Label.CertTemplate;
                 else if (objectClasses.Contains(PKIEnrollmentServiceClass, StringComparer.InvariantCultureIgnoreCase))
@@ -395,6 +397,7 @@ public static Label GetLabel(this SearchResultEntry entry)
         private const string OrganizationalUnitClass = "organizationalUnit";
         private const string DomainClass = "domain";
         private const string ContainerClass = "container";
+        private const string ConfigurationClass = "configuration";
         private const string PKICertificateTemplateClass = "pKICertificateTemplate";
         private const string PKIEnrollmentServiceClass = "pKIEnrollmentService";
         private const string CertificationAutorityClass = "certificationAuthority";

diff --git a/src/CommonLib/LDAPQueries/LDAPFilter.cs b/src/CommonLib/LDAPQueries/LDAPFilter.cs
@@ -142,6 +142,18 @@ public LDAPFilter AddContainers(params string[] conditions)
             return this;
         }
 
+        /// <summary>
+        ///     Add a filter that will include Configuration objects
+        /// </summary>
+        /// <param name="conditions"></param>
+        /// <returns></returns>
+        public LDAPFilter AddConfiguration(params string[] conditions)
+        {
+            _filterParts.Add(BuildString("(objectClass=configuration)", conditions));
+
+            return this;
+        }
+
         /// <summary>
         ///     Add a filter that will include Computer objects
         ///

diff --git a/src/CommonLib/LDAPUtils.cs b/src/CommonLib/LDAPUtils.cs
@@ -159,6 +159,7 @@ public IEnumerable<OutputBase> GetWellKnownPrincipalOutput(string domain)
                     Label.Domain => new OutputTypes.Domain(),
                     Label.OU => new OU(),
                     Label.Container => new Container(),
+                    Label.Configuration => new Container(),
                     _ => throw new ArgumentOutOfRangeException()
                 };
 

diff --git a/src/CommonLib/Processors/ACLProcessor.cs b/src/CommonLib/Processors/ACLProcessor.cs
@@ -31,6 +31,7 @@ static ACLProcessor()
                 {Label.GPO, "f30e3bc2-9ff0-11d1-b603-0000f80367c1"},
                 {Label.OU, "bf967aa5-0de6-11d0-a285-00aa003049e2"},
                 {Label.Container, "bf967a8b-0de6-11d0-a285-00aa003049e2"},
+                {Label.Configuration, "bf967a87-0de6-11d0-a285-00aa003049e2"},
                 {Label.RootCA, "3fdfee50-47f4-11d1-a9c3-0000f80367c1"},
                 {Label.AIACA, "3fdfee50-47f4-11d1-a9c3-0000f80367c1"},
                 {Label.EnterpriseCA, "ee4aa692-3bba-11d2-90cc-00c04fd91ab1"},

diff --git a/src/CommonLib/SearchResultEntryWrapper.cs b/src/CommonLib/SearchResultEntryWrapper.cs
@@ -168,6 +168,7 @@ public ResolvedSearchResult ResolveBloodHoundInfo()
                     break;
                 case Label.OU:
                 case Label.Container:
+                case Label.Configuration:
                 case Label.RootCA:
                 case Label.AIACA:
                 case Label.NTAuthStore: