Skip to content

Commit 13b3af3

Browse files
committed
Apply the ACEs for Authenticated Users
1 parent c843e36 commit 13b3af3

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

lib/msf/core/exploit/remote/ldap/active_directory.rb

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -294,6 +294,8 @@ def adds_sd_grants_permissions?(ldap, security_descriptor, matcher, test_sid: ni
294294
case ace.body.sid
295295
when Rex::Proto::Secauthz::WellKnownSids::SECURITY_WORLD_SID
296296
matcher.apply_ace!(ace)
297+
when Rex::Proto::Secauthz::WellKnownSids::SECURITY_AUTHENTICATED_USER_SID
298+
matcher.apply_ace!(ace)
297299
when Rex::Proto::Secauthz::WellKnownSids::SECURITY_PRINCIPAL_SELF_SID
298300
matcher.apply_ace!(ace) if self_sid == test_sid
299301
when Rex::Proto::Secauthz::WellKnownSids::SECURITY_CREATOR_OWNER_SID

0 commit comments

Comments
 (0)