Skip to content

Commit ce1de89

Browse files
authored
added checks for WriteDacl and WriteProp permissions
1 parent 90285f2 commit ce1de89

File tree

1 file changed

+20
-0
lines changed

1 file changed

+20
-0
lines changed

Get-RBCD-Threaded/Program.cs

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -514,6 +514,26 @@ public static void Get_RBCD_ACLs(List<SearchResult> resultList, List<rbcd> rbcdL
514514
rbcdList.Add(new rbcd(objectSid.SamAccountName, objectSid.DomainName, hostname, "WriteOwner"));
515515
}
516516
}
517+
else if (adRule.ActiveDirectoryRights.ToString().Contains("WriteDacl"))
518+
{
519+
if (allSids.Contains(sid) && sid != computerSid)
520+
{
521+
var objectSid = sidMapList.FirstOrDefault(o => o.ObjectSID == sid);
522+
rbcdList.Add(new rbcd(objectSid.SamAccountName, objectSid.DomainName, hostname, "WriteDacl"));
523+
}
524+
}
525+
else if (adRule.ActiveDirectoryRights.ToString().Contains("WriteProp"))
526+
{
527+
if (adRule.ObjectType.ToString().Contains("3f78c3e5-f79a-46bd-a0b8-9d18116ddc79"))
528+
{
529+
if (allSids.Contains(sid) && sid != computerSid)
530+
{
531+
var objectSid = sidMapList.FirstOrDefault(o => o.ObjectSID == sid);
532+
rbcdList.Add(new rbcd(objectSid.SamAccountName, objectSid.DomainName, hostname, "WriteProp"));
533+
}
534+
}
535+
536+
}
517537

518538
}
519539

0 commit comments

Comments
 (0)