Skip to content

Added -ace-type flag to specify ACE type on adding/removing officers/managers#335

Open
LazyTitan33 wants to merge 3 commits intoly4k:mainfrom
LazyTitan33:main
Open

Added -ace-type flag to specify ACE type on adding/removing officers/managers#335
LazyTitan33 wants to merge 3 commits intoly4k:mainfrom
LazyTitan33:main

Conversation

@LazyTitan33
Copy link
Copy Markdown

Currently, when using -add-officer or -remove-officer (manager), the ACE that is added or removed is strictly for Allow. There may be situations where adding or removing a Deny ACE is desired (cough recent HTB machine, cough).

I've added the -ace-type flag where it can be specified whether Allow or Deny type ACE is desired to be created/removed.

Example:

certipy ca -dc-host dc01.lazy.lab -u 'user' -p 'pass' -ca example-DC01-CA -remove-officer 'admin' -ace-type deny

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant