NetExec icon indicating copy to clipboard operation
NetExec copied to clipboard

nxcdb groups

Open dehobbs opened this issue 4 months ago • 2 comments

In the nxcdb, the groups and data is still found under smb but the ability to pull groups is no longer a part of the SMB module. It's now part of the ldap module.

In addition, when you pull a lost of computers from the domain with ldap using --computers, it should store in a 'hosts' table in the database

dehobbs avatar Sep 20 '25 20:09 dehobbs

Hey, so the former --groups command did not populate the groups table in the database, but --local-auth did and still does. However, I agree that the ldap command should probably do that as well. If you have the time feel free to open up a PR to make that addition.

However, i don't agree on the second part, because when calling --computers we do not have much information besides the sAMAccountName to fill the database. To be able to fill most of the columns you need to figure out SMB versions available/signing etc., so i don't think we should fill out nearly blank rows. Also only because the computers are in LDAP that doesn't mean they still exist on the network.

NeffIsBack avatar Sep 25 '25 12:09 NeffIsBack

However, i don't agree on the second part, because when calling --computers we do not have much information besides the sAMAccountName to fill the database. To be able to fill most of the columns you need to figure out SMB versions available/signing etc., so i don't think we should fill out nearly blank rows. Also only because the computers are in LDAP that doesn't mean they still exist on the network.

Agreed. We could add them as machine accounts to the users table, but that's confusing IMO.

Marshall-Hallenbeck avatar Sep 25 '25 15:09 Marshall-Hallenbeck