Metadata-Version: 2.1
Name: abuseACL
Version: 1.0.0
Summary: List vulnerable ACL.
Home-page: https://github.com/AetherBlack/abuseACL
Author: Aether
License: MIT
Project-URL: Bug Tracker, https://github.com/AetherBlack/abuseACL/issues
Keywords: abuseACL ActiveDirectory AD
Classifier: Intended Audience :: Information Technology
Classifier: Programming Language :: Python :: 3
Requires-Python: >=3.6, <4
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: impacket
Requires-Dist: colorama

![](./.github/banner.png)

    A python script to automatically list vulnerable Windows ACEs/ACLs.
    
    PyPI
    GitHub release (latest by date)

## Installation

You can install it from pypi (latest version is PyPI) with this command:

```bash
sudo python3 -m pip install abuseACL
```

OR from source :

```bash
git clone https://github.com/AetherBlack/abuseACL
cd abuseACL
sudo python3 -m pip install -r requirements.txt
sudo python3 setup.py install
```

## Examples

- You want to list vulnerable ACEs/ACLs for the current user :

```bash
abuseACL CONTOSO/User:'Password'@dc01.contoso.intra
```

- You want to list vulnerable ACEs/ACLs for another user/computer/group :

```bash
abuseACL -principal Aether CONTOSO/User:'Password'@dc01.contoso.intra
```

- You want to list vulnerable ACEs/ACLs for a list of users/computers/groups :

```bash
abuseACL -principalsfile accounts.txt CONTOSO/User:'Password'@dc01.contoso.intra
```

You can then use [dacledit](https://github.com/ThePorgs/impacket/blob/master/examples/dacledit.py) to exploit the ACEs.

---

## Credits

- [@_nwodtuhs](https://twitter.com/_nwodtuhs) for the helpful [DACL](https://www.thehacker.recipes/a-d/movement/dacl) documentation
- [@fortra](https://github.com/fortra/) for developping [impacket](https://github.com/fortra/impacket)

## License

[GNU General Public License v3.0](./LICENSE)
