Goddi (Go Dump Domain Info) - Dumps Active Directory Domain Information

Based on work from Scott Sutherland (@_nullbind), Antti Rantasaari, Eric Gruber (@egru), Will Schroeder (@harmj0y), and the PowerView authors.

Install
Use the executables in the releases section. If you want to build it yourself, make sure that your go environment is setup according to the Go setup doc. The goddi package also uses the below package.

go get gopkg.in/ldap.v2

Windows
Tested on Windows 10 and 8.1 (go1.10 windows/amd64).

Linux
Tested on Kali Linux (go1.10 linux/amd64).

• umount, mount, and cifs-utils need to be installed for mapping a share for GetGPP

apt-get update
apt-get install -y mount cifs-utils

• make sure nothing is mounted at /mnt/goddi/
• make sure to run with sudo

Run
When run, will default to using TLS (tls.Client method) over 636. On Linux, make sure to run with sudo.

• username: Target user. Required parameter.
• password: Target user's password. Required parameter.
• domain: Full domain name. Required parameter.
• dc: DC to target. Can be either an IP or full hostname. Required parameter.
• startTLS: Use to StartTLS over 389.
• unsafe: Use for a plaintext connection.

PS C:\Users\Administrator\Desktop> .\godditest-windows-amd64.exe -username=testuser -password="testpass!" -domain="test.local" -dc="dc.test.local" -unsafe
[i] Begin PLAINTEXT LDAP connection to 'dc.test.local'...
[i] PLAINTEXT LDAP connection to 'dc.test.local' successful...
[i] Begin BIND...
[i] BIND with 'testuser' successful...
[i] Begin dump domain info...
[i] Domain Trusts: 1 found
[i] Domain Controllers: 1 found
[i] Users: 12 found
        [*] Warning: keyword 'pass' found!
        [*] Warning: keyword 'fall' found!
[i] Domain Admins: 4 users found
[i] Enterprise Admins: 1 users found
[i] Forest Admins: 0 users found
[i] Locked Users: 0 found
[i] Disabled Users: 2 found
[i] Groups: 45 found
[i] Domain Sites: 1 found
[i] Domain Subnets: 0 found
[i] Domain Computers: 17 found
[i] Deligated Users: 0 found
[i] Users with passwords not set to expire: 6 found
[i] Machine Accounts with passwords older than 45 days: 18 found
[i] Domain OUs: 8 found
[i] Domain Account Policy found
[i] Domain GPOs: 7 found
[i] FSMO Roles: 3 found
[i] SPNs: 122 found
[i] LAPS passwords: 0 found
[i] GPP enumeration starting. This can take a bit...
[i] GPP passwords: 7 found
[i] CSVs written to 'csv' directory in C:\Users\Administrator\Desktop
[i] Execution took 1.4217256s...
[i] Exiting...

Functionality
StartTLS and TLS (tls.Client func) connections supported. Connections over TLS are default. All output goes to CSVs and are created in /csv/ in the current working directory. Dumps:

• Domain users. Also searches Description for keywords and prints to a seperate csv ex. "Password" was found in the domain user description.
• Users in priveleged user groups (DA, EA, FA).
• Users with passwords not set to expire.
• User accounts that have been locked or disabled.
• Machine accounts with passwords older than 45 days.
• Domain Computers.
• Domain Controllers.
• Sites and Subnets.
• SPNs and includes csv flag if domain admin (a flag to note SPNs that are DAs in the SPN CSV output).
• Trusted domain relationships.
• Domain Groups.
• Domain OUs.
• Domain Account Policy.
• Domain deligation users.
• Domain GPOs.
• Domain FSMO roles.
• LAPS passwords.
• GPP passwords. On Windows, defaults to mapping Q. If used, will try another mapping until success R, S, etc... On Linux, /mnt/goddi is used.

Download Goddi

Related articles

• Hacking App
• Hacking Tools And Software
• Physical Pentest Tools
• Termux Hacking Tools 2019
• Hacker Search Tools
• Pentest Recon Tools
• Pentest Box Tools Download
• Pentest Tools Android
• New Hack Tools
• Pentest Tools Alternative
• Physical Pentest Tools
• Hacking Tools For Kali Linux
• Hacking Tools 2019
• Pentest Recon Tools
• Hacking Tools Software
• Hacks And Tools
• How To Make Hacking Tools
• Pentest Tools Linux
• Blackhat Hacker Tools
• Hacker Tools For Mac
• Pentest Tools Download
• Hacker Tools Windows
• World No 1 Hacker Software
• Pentest Tools Open Source
• Hacking Tools For Games
• Hack Tools Online
• Hak5 Tools
• Hacking Tools For Windows Free Download
• Hacker Tools 2020
• Hacking Tools Usb
• Hack App
• Hack Tools For Pc
• Hacking Tools For Mac
• Hacking Tools Pc
• Hack Tools For Ubuntu
• Hacking Tools For Windows 7
• Hacking Tools For Games
• Hack Tools Download
• Hacking Tools Software
• Pentest Recon Tools
• Hack Website Online Tool
• Pentest Tools For Android
• Hacking Tools Usb
• Hacker Tools List
• Pentest Tools Download
• Pentest Tools Review
• Hak5 Tools
• Hacking Tools 2019
• Usb Pentest Tools
• Android Hack Tools Github
• Hacker Tool Kit
• Pentest Tools Bluekeep
• Hacking Tools For Mac
• Pentest Tools Url Fuzzer
• Pentest Tools Port Scanner
• Hacking Tools Kit
• Free Pentest Tools For Windows
• Hacker Techniques Tools And Incident Handling
• Pentest Tools Kali Linux
• Hacker Tools List
• Pentest Tools Url Fuzzer
• Hacking Tools Download
• Hack Tools Pc
• Pentest Tools Nmap
• Hacker Tools Github
• Tools 4 Hack
• Hacking Tools Free Download
• Hacker Tools For Pc
• Hacking Tools Hardware
• Best Pentesting Tools 2018
• Pentest Reporting Tools
• Pentest Tools Github
• Hack Tools For Pc
• World No 1 Hacker Software
• Pentest Tools Review
• Github Hacking Tools
• Hacks And Tools
• Free Pentest Tools For Windows
• Hacker Search Tools
• Pentest Tools Linux
• Hack And Tools
• Top Pentest Tools
• Pentest Tools For Ubuntu
• Beginner Hacker Tools
• Hacking Tools Windows 10
• Pentest Tools Website Vulnerability
• Pentest Tools Nmap
• Hack Tools For Windows