main.go

/*
Go dump domain info.
Author: Thomas Elling (@thomas_elling), NetSPI 2018
References: Based on work from Scott Sutherland (@_nullbind), Antti Rantasaari, Eric Gruber (@egru),
@harmj0y, and the PowerView authors https://github.com/PowerShellMafia/PowerSploit/tree/master/Recon.

Requirements: gopkg.in/ldap.v2

Usage: goddi-windows-amd64.exe -username=testuser -password="testpass!" -domain="test.local" -dc="dc.test.local"
*/
package main

import (
	"flag"
	"fmt"
	"log"
	"strings"
	"time"

	"github.com/NetSPI/goddi/ddi"
)

func main() {

	ldapServer := flag.String("dc", "", "DC to connect to, use IP or full hostname ex. -dc=\"dc.test.local\"")
	domain := flag.String("domain", "", "domain ex. -domain=\"test.local\"")
	user := flag.String("username", "", "username to connect with ex. -username=\"testuser\"")
	pass := flag.String("password", "", "password to connect with ex. -password=\"testpass!\"")
	startTLS := flag.Bool("startTLS", false, "Use for StartTLS on 389. Default is TLS on 636")
	unsafe := flag.Bool("unsafe", false, "Use for testing and plaintext connection")
	flag.Parse()

	if len(*ldapServer) == 0 || len(*domain) == 0 || len(*user) == 0 || len(*pass) == 0 {
		flag.PrintDefaults()
		log.Fatal("[ERROR] Provide username, password, DC, and domain!\n")
	}

	var ldapIP string
	*ldapServer, ldapIP = goddi.ValidateIPHostname(*ldapServer, *domain)

	baseDN := "dc=" + strings.Replace(*domain, ".", ",dc=", -1)
	username := *user + "@" + *domain

	li := &goddi.LdapInfo{
		LdapServer:  *ldapServer,
		LdapIP:      ldapIP,
		LdapPort:    uint16(389),
		LdapTLSPort: uint16(636),
		User:        username,
		Usergpp:     *user,
		Pass:        *pass,
		Domain:      *domain,
		Unsafe:      *unsafe,
		StartTLS:    *startTLS}

	goddi.Connect(li)
	defer li.Conn.Close()

	start := time.Now()
	goddi.GetDomainTrusts(li.Conn, baseDN)
	goddi.GetDomainControllers(li.Conn, baseDN)
	goddi.GetUsers(li.Conn, baseDN)
	goddi.GetGroupMembers(li.Conn, baseDN, "Domain Admins")
	goddi.GetGroupMembers(li.Conn, baseDN, "Enterprise Admins")
	goddi.GetGroupMembers(li.Conn, baseDN, "Forest Admins")
	goddi.GetUsersLocked(li.Conn, baseDN)
	goddi.GetUsersDisabled(li.Conn, baseDN)
	goddi.GetGroupsAll(li.Conn, baseDN)
	goddi.GetDomainSite(li.Conn, baseDN)
	goddi.GetDomainSubnet(li.Conn, baseDN)
	goddi.GetDomainComputers(li.Conn, baseDN)
	goddi.GetUsersDeligation(li.Conn, baseDN)
	goddi.GetUsersNoExpire(li.Conn, baseDN)
	goddi.GetMachineAccountOldPassword(li.Conn, baseDN)
	goddi.GetDomainOUs(li.Conn, baseDN)
	goddi.GetDomainAccountPolicy(li.Conn, baseDN)
	goddi.GetDomainGPOs(li.Conn, baseDN)
	goddi.GetFSMORoles(li.Conn, baseDN)
	goddi.GetSPNs(li.Conn, baseDN)
	goddi.GetLAPS(li.Conn, baseDN)
	goddi.GetGPP(li.Conn, li.Domain, li.LdapServer, li.Usergpp, li.Pass)
	stop := time.Since(start)

	cwd := goddi.GetCWD()
	fmt.Printf("[i] CSVs written to 'csv' directory in %s\n[i] Execution took %s...\n[i] Exiting...\n", cwd, stop)
}