Update default.tasks

add certificate reports to default
RagingRedRiot · Oct 27, 2023 · c187d1d · c187d1d
1 parent e945717
commit c187d1d
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/tasks/default.tasks b/tasks/default.tasks
@@ -71,5 +71,13 @@
 ["Owned Objects", "HTML", "Owned-Objects.html", "MATCH (n {owned:true}) return n.name as Name, n.highvalue as HighValue, n.enabled as Enabled, n.trustedtoauth as TrustedToAuth, n.unconstraineddelegation as UncDelegation, n.serviceprincipalnames as SPN"]
 ["Owned Objects Admin To", "HTML", "Owned-Objects-AdminTo-Direct.html", "MATCH (n {owned:true})-[r:AdminTo]->(c:computer) return n.name as Name, n.highvalue as HighValue, n.enabled as Enabled, c.name as Computer, c.highvalue as ComputerHighValue, c.enabled as ComputerEnabled, c.serviceprincipalname as ComputerSPN"]
 ["Owned Objects Member Of", "HTML", "Owned-Objects-MemberOf-Direct.html", "MATCH (n {owned:true})-[r:MemberOf]->(g:Group) return n.name as Name, n.highvalue as HighValue, n.enabled as Enabled, g.name as GroupName, g.description as GroupDescription"]
+["Certificate Templates", "HTMLCSV", "CertificateTemplates", "MATCH (n:GPO) WHERE n.type = 'Certificate Template' RETURN n.`Display Name` as Name, n.highvalue as HighValue, n.Enabled as Enabled, n.`Enrollee Supplies Subject` as EnroleeSuppliesSjb, n.domain as Domain, n.`Extended Key Usage` as `Key Usage`" ]
+["Certificate Authorities", "HTMLCSV", "CertificateAuthorties", "MATCH (n:GPO) WHERE n.type = 'Enrollment Service' RETURN n.`DNS Name` as DNS, n.`CA Name` as Name, n.domain as Domain, n.`Web Enrollment` as `Web Enrollment`" ]
+["Certificate Enrollment Rights", "HTMLCSV", "CertificateTemplateEnrollRights", "MATCH p=(g)-[:Enroll|AutoEnroll]->(n:GPO) WHERE n.type = 'Certificate Template' return n.`Display Name` as Template, n.Enabled as Enabled, g.name as `Enrollment Rights`" ]
+["Certificate Template ESC1 Vuln", "HTMLCSV", "CertificateTemplates_ESC1", "MATCH (n:GPO) WHERE n.type = 'Certificate Template' and n.`Enrollee Supplies Subject` = true and n.`Client Authentication` = true and n.`Enabled` = true  RETURN n.`Display Name` as `Display Name`, n.`Template Name` as Name, n.domain as Domain, n.`Certificate Authorities` as CAs" ]
+["Certificate Template ESC2 Vuln", "HTMLCSV", "CertificateTemplates_ESC2", "MATCH (n:GPO) WHERE n.type = 'Certificate Template' and n.`Enabled` = true and (n.`Extended Key Usage` = [] or 'Any Purpose' IN n.`Extended Key Usage`) RETURN n.`Display Name` as `Display Name`, n.`Template Name` as Name, n.domain as Domain, n.`Certificate Authorities` as CAs" ]
+["Certificate Template ESC3 Vuln", "HTMLCSV", "CertificateTemplates_ESC3", "MATCH (n:GPO) WHERE n.type = 'Certificate Template' and n.`Enabled` = true and (n.`Extended Key Usage` = [] or 'Any Purpose' IN n.`Extended Key Usage` or 'Certificate Request Agent' IN n.`Extended Key Usage`) RETURN n.`Display Name` as `Display Name`, n.`Template Name` as Name, n.domain as Domain, n.`Certificate Authorities` as CAs" ]
+["Certificate Template ESC6 Vuln", "HTMLCSV", "CertificateTemplates_ESC6", "MATCH (n:GPO) WHERE n.type = 'Enrollment Service' and n.`User Specified SAN` = 'Enabled' RETURN n.`Display Name` as `Display Name`, n.`Template Name` as Name, n.domain as Domain, n.`Certificate Authorities` as CAs" ]
+["Certificate Template ESC8 Vuln", "HTMLCSV", "CertificateTemplates_ESC6", "MATCH (n:GPO) WHERE n.type = 'Enrollment Service' and n.`Web Enrollment` = 'Enabled' RETURN n.`Display Name` as `Display Name`, n.`Template Name` as Name, n.domain as Domain, n.`Certificate Authorities` as CAs" ]
 ["Report Index","HTML","index.html","REPORT-INDEX"]
 [ "Zip Tasks", "ZIP", "Reports.zip", "ZIP-TASKS" ]