Merge branch 'v4' into BED-4836

SpecterOps · Sep 17, 2024 · d7feb12 · d7feb12
2 parents e3fb240 + dd20a7b
commit d7feb12
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/src/CommonLib/Helpers.cs b/src/CommonLib/Helpers.cs
@@ -295,6 +295,11 @@ public static IRegistryKey OpenRemoteRegistry(string target) {
             CommonOids.SmartcardLogon,
             CommonOids.AnyPurpose
         };
+
+        public static string[] SchannelAuthenticationOIDs = new string[] {
+            CommonOids.ClientAuthentication,
+            CommonOids.AnyPurpose
+        };
     }
 
     public class ParsedGPLink {

diff --git a/src/CommonLib/Processors/LdapPropertyProcessor.cs b/src/CommonLib/Processors/LdapPropertyProcessor.cs
@@ -565,6 +565,11 @@ public static Dictionary<string, object> ReadCertTemplateProperties(IDirectoryOb
                 effectiveekus.Intersect(Helpers.AuthenticationOIDs).Any() | effectiveekus.Length == 0;
             props.Add("authenticationenabled", authenticationEnabled);
 
+            // Construct schannelauthenticationenabled
+            var schannelAuthenticationEnabled =
+                effectiveekus.Intersect(Helpers.SchannelAuthenticationOIDs).Any() | effectiveekus.Length == 0;
+            props.Add("schannelauthenticationenabled", schannelAuthenticationEnabled);
+
             return props;
         }