Skip to content

Conversation

@sufnlower
Copy link

I stayed up all night playing a CTF and all I found was a hash.

@sufnlower
Copy link
Author

Hi skelsec, I made a pull request. Why did the enc dictionary of translations contain nTSecurityDescriptor and print out bad bytes? By commenting it out of there so the conversion fell through to the lookup table in the elif, the ACEs were loaded instead which is more useful information.

I like msldap because it works well which is what got me pulling on this thread.

@skelsec
Copy link
Owner

skelsec commented Feb 4, 2025

Hello, thank you for the PR!
May I ask what bad bytes are you referring to?
This PR will be rejected, because the nTSecurityDescriptor must be returning bytes or bytearray object, for two reasons:

  1. this would impact the API in a major way.
  2. Parsing nTSecurityDescriptor to an object takes a lof of resources, and some queroies could easily return hunderds of nTSecurityDescriptors which would slow down the app considerably

@sufnlower
Copy link
Author

sufnlower commented Feb 5, 2025

No bad bytes. I misinterpreted them. I like the objects. I'll see if I can get my script to handle the bytes else use my fork which uses code you had already written but didn't appear to be using.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants