abuseACL 1.0.0

A python script to automatically list vulnerable Windows ACEs/ACLs.

Installation

You can install it from pypi (latest version is ) with this command:

sudo python3 -m pip install abuseACL

OR from source :

git clone https://github.com/AetherBlack/abuseACL
cd abuseACL
sudo python3 -m pip install -r requirements.txt
sudo python3 setup.py install

Examples

• You want to list vulnerable ACEs/ACLs for the current user :

abuseACL CONTOSO/User:'Password'@dc01.contoso.intra

• You want to list vulnerable ACEs/ACLs for another user/computer/group :

abuseACL -principal Aether CONTOSO/User:'Password'@dc01.contoso.intra

• You want to list vulnerable ACEs/ACLs for a list of users/computers/groups :

abuseACL -principalsfile accounts.txt CONTOSO/User:'Password'@dc01.contoso.intra

You can then use dacledit to exploit the ACEs.

Credits

• @_nwodtuhs for the helpful DACL documentation
• @fortra for developping impacket

License

GNU General Public License v3.0