π Find Misconfigured Delegation
NetExec allows you to retrieve the list of all misconfigured delegations
nxc ldap <target> -u <username> -p '<password>' --find-delegation
# Example Output
SMB <target> 445 WINTERFELL [*] Windows 10 / Server 2019 Build 17763 x64 (name:WINTERFELL) (domain:<domain>) (signing:True) (SMBv1:False)
LDAP <target> 389 WINTERFELL [+] <domain>\<username>:<password> (Pwn3d!)
LDAP <target> 389 WINTERFELL AccountName AccountType DelegationType DelegationRightsTo
LDAP <target> 389 WINTERFELL ------------ ----------- ---------------------------------- ----------------------------------------------------------------
LDAP <target> 389 WINTERFELL sansa.stark Person Unconstrained N/A
LDAP <target> 389 WINTERFELL jon.snow Person Constrained w/ Protocol Transition CIFS/winterfell, CIFS/winterfell.<domain>
LDAP <target> 389 WINTERFELL jon.snow Person Resource-Based Constrained RBCD-COMPUTER$
LDAP <target> 389 WINTERFELL CASTELBLACK$ Computer Constrained HTTP/winterfell, HTTP/winterfell.<domain>
LDAP <target> 389 WINTERFELL ΠΏΠΎΠ»ΡΠ·ΠΎΠ²Π°ΡΠ΅Π»Ρ Person Resource-Based Constrained WINTERFELL$