Tips-Of-Mine/PowerHuntShares
Tips-Of-Mine/PowerHuntShares
2
0
Fork 0
mirror of https://github.com/NetSPI/PowerHuntShares.git synced 2025-05-04 19:28:42 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Scott Sutherland 2024-09-26 14:30:08 -05:00 committed by GitHub
parent 7632f0ef9d
commit 22cf2d75ee
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -211,12 +211,9 @@ Todos
* Add ability to specify additional groups to target
* Add directory listing to insights page.
* Add ability to grab system OS information for data insights.
* Add visualization: Visual squares with coloring mapped to share volume density by subnet or ip?.
* Add file type search. (half coded) + add to data insights. Don't forget things like *.aws, *.azure *.gcp directories that store cloud credentials.
* Add file content search.
* Add DontExcludePrintShares option
* Add auto targeting of groups that contain a large % of the user population; over 70% (make configurable). Add as option.
* Add "grouping confidence score"; Folders with the same name and the same file listing should have a high natural grouping score. Weights should also be added if the owner, creator, creation dates, modification dates, and subnets are shared. this will help to distiguish between shares that are related and those that are not (aka simply common names like log or temp that are not related to the same system, process, or application).
* Add configuration fid:
netlogon and sysvol you may get access denied when using windows 10 unless the setting below is configured. Automat a check for this, and attempt to modify if privs are at correct level. gpedit.msc, go to Computer -> Administrative Templates -> Network -> Network Provider -> Hardened UNC Paths, enable the policy and click "Show" button. Enter your server name (* for all servers) into "Value name" and enter the folowing text "RequireMutualAuthentication=0,RequireIntegrity=0,RequirePrivacy=0" wihtout quotes into the "Value" field.
* Add an interesting shares based on names to data insights. example: sql, backup, password, etc.