Add Support For Running From Non-Domain-Joined Computer

[7MinSec]

Hi,

I'm trying this out on a pentest where I've got an admin cmd box open as DOMAIN\compromiseduser. When I run Locksmith it complains in red a lot about not being able to find the domain or forest (even if manually specified). I'm going to see if I can pick apart the PowerShell and found out exactly what the problems are, but if you say the project was never intended to run on a non-domain-joined workstation, I'll move along since my PS-fu is sketchy at best :-)

Thanks,
Brian

[jakehildreth]

Hey Brian! I certainly intended for Locksmith to be run from a non-domain joined machine as a treat to you dirty, dirty red teamers 😆 but it has been pretty low priority.

If you get it working, I'd love if you did a PR!

[jakehildreth]

If you're interested in a little mentorship to improved that PS-fu, reach out! All the Locksmith friends love helping others learn.

[techspence]

@7MinSec I started down this path a while ago but never got it 100% complete. If you’d like to compare notes I’d be down to revisit it. :)

[7MinSec]

Thanks both of you! I have to wrap this engagement soon so I used other tools, but definitely still interested in making this work from, non-domain-joined perspective. Maybe we can keep this issue open and pick at it from time to time? @techspence I got as far as setting static values in some of the domain enumeration commands and that's it, so I'm sure your notes are miles ahead :-)

[jakehildreth]

I'll gladly keep it open! You're not the first to request such a thing.

A related stretch goal is to add non-Windows support too, but like... I have a job and a family 🤣

[jakehildreth]

Adding this to the MVP for Locksmith 2.

[7MinSec]

Thank you!!!

[jakehildreth]

Ope. Just realized I need to reopen this. CA-based ESCs (6, 7, and 11 at the moment) currently do NOT work from non-domain-joined machines. But the others do!

[jakehildreth]

@7MinSec I'm pretty sure ESC6, 7, and 11 are working correctly from non-domain joined machine! Can you try?