o j)@s\ddlZddlZddlZddlZddlmZmZGdddZddZ e dkr,e dSdS)N)strftimegmtimec@s<eZdZddZddZddZddZd d Zd d Zd S) PrettyOuputcCsrg}|r||d|d}|s|ddd}t|dkr/tdt|D]}|ddq&ddd|DS) NrcSsg|]}t|qS)str).0gr r /root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/ldapdomaindump/pretty.py sz#PrettyOuput.d2b..)appendlenrangeinsertjoin)selfatbint2binxr r rd2b s zPrettyOuput.d2bcCst|tr|S|dkr dS|dkrdSt|d}|d}|d|8}|d}|d|8}|d}|d|8}d }|d krE|d |7}n |d krP|d |7}|d kr\|d |7}n |d krg|d|7}|d krt|d|7}|S|d kr|d|7}|S)NrNonelzNot SetiiQi<r z {0} days z{0} day z {0} hours z {0} hour z {0} minutes z {0} minute ) isinstancer absformat)rtimesecdayshrsminsresultr r rconverts8     zPrettyOuput.convertcCstdtd|ddddtd|ddddtd|ddd d||ddd d}td |td td |dtd|dtd|dtd|dtd|dtd|dtd td||ddddtd||ddddtd||ddddtd|ddddtd ||ddd!ddS)"Nz +-----------------------------------------+ | Password Policy Information | +-----------------------------------------+ z[+] Password Info for Domain:r attributesdcz [+] Minimum password length: instanceTypez [+] Password history length:pwdHistoryLength pwdPropertiesz [+] Password Complexity Flags:r z$ [+] Domain Refuse Password Change:z& [+] Domain Password Store Cleartext:rz% [+] Domain Password Lockout Admins:rz& [+] Domain Password No Clear Change:z% [+] Domain Password No Anon Change:z [+] Domain Password Complex:z [+] Maximum password age: maxPwdAgez [+] Minimum password age: minPwdAgez# [+] Reset Account Lockout Counter:lockoutDurationz [+] Account Lockout Threshold:lockoutThresholdz [+] Forced Log off Time: forceLogoff)printupperrr')rdatapassword_propertiesr r rpassword_complexity2s&    $zPrettyOuput.password_complexitycCsXtdtd|ddddtd|ddddtd|ddddS) Nz +--------------------------------------+ | Getting Domain Sid For | +--------------------------------------+ z[+] Domain Name:rr(r)z Domain Sid: objectSidr )r5)rr7r r r domain_infoNs zPrettyOuput.domain_infocCstd|D]2}|ddr|dddnd}td|d|dddd |dd dd |qtd |D]}td |ddddq?td dS)Nzb +------------------------+ | Users Infos | +------------------------+ r( descriptionrz(null)z Account: \sAMAccountNamez Name: namez Desc: r zuser:[])r5get)rusersr)userdescr r r user_infoYs$> zPrettyOuput.user_infocCstd|D]}td|ddddq|D]K}|ddrdtdd |ddtj}|rdtd |D]*}|d krBd }n |d krId}n|dkrOd}td|dddd|d|q9qdS)Nzp +------------------------+import os.path | Groups Infos | +------------------------+ zgroup:[r(r?rr@memberz^CN=([\w\s\-\_\{\}\.\$\#]+) z& [+] Getting domain group memberships:zS-1-5-11z NT AUTHORITY\Authenticated UserszS-1-5-4zNT AUTHORITY\INTERACTIVEzS-1-5-17zNT AUTHORITY\IUSRzGroup 'z' has member: r=)r5rArefindallrM)rgroupsr)grouprBrCr r r groups_infohs$*zPrettyOuput.groups_infoN) __name__ __module__ __qualname__rr'r9r;rErMr r r rrs  rcCstjdd}|jdddd|}|jrt|jd }t|}Wdn1s,wYt|jd }t|}Wdn1sHwYt|jd  }t|}Wdn1sdwYt}| |}| || || | || dStd dS) Nz0LDAPDomainDump to pretty output like enum4linux.)r<z-dz --directoryzThe ldapdomaindump directory where the json files are saved. Required files: domain_users.json, domain_groups.json and domain_policy.json)helpz/domain_policy.jsonz/domain_users.jsonz/domain_groups.jsonz&Missing parameter --directory /output/)argparseArgumentParser add_argument parse_args directoryopenjsonloadrr;r9rEr6rMr5)parserargsfdomainrBrKprettyr)r r rmains&       r___main__) rRrXos.pathosrHr!rrrr_rNr r r rsx