Description

A new module to extract privilege assignments from GPOs by parsing the GptTmpl.inf of the Default Domain Policy and spidering for other GPO deployed privileges. The module also resolves the Security Identifiers (SIDs) via LDAP - LDAP resolution can be disabled when the NO_LDAP flag is set.

The file spidering and retrieval functionality in this module was inspired by the gpp_autologin and gpp_password modules, while the LDAPS connection logic was partially adapted from the add-computer module and a fallback to LDAP was added.

Type of change

• New feature (non-breaking change which adds functionality)
• This change requires a documentation update

How Has This Been Tested?

1. Parsing GPO files from an SMB share on a Windows domain controller (tested with SYSVOL read access).
2. Resolving SIDs using LDAP over SSL (LDAPS) and plaintext LDAP as fallback.
3. Validating the NO_LDAP flag to ensure LDAP queries are bypassed when enabled.
4. Tested against a couple of machines which have GptTmpl.inf deployed.

Screenshots:

Checklist:

• I have ran Ruff against my changes (via poetry: poetry run python -m ruff check . --preview, use --fix to automatically fix what it can)
• My code follows the style guidelines of this project (should be covered by Ruff above)
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas