Pywerview

Modifications

- Workaround to use `LDAP_SERVER_SD_FLAGS` until impacket 0.13 is released
- By default, `pywerview` is no longer installed with the kerberos support. If you want it, you need to run `pip install pywerview[kerberos]` or `pip install ".[kerberos]"`

Bug fix

- Fix wrong argument which throws TypeError Exceptions (Thanks NeffIsBack)
- Add ability to only supply lm/nt hash (Thanks NeffIsBack)

Modifications

- pywerview now uses a `pyproject.toml` file. Thanks jsherwood0, fabaff and NickCao

Features

- `get-netpki`: returns a list of all the `pKIEnrollmentService` objects.
- `get-netcerttmpl`: returns a list of all the `pKICertificateTemplate` objects. This function implements the `--caname CA-NAME` flag to only retrieve certificates for this certificate authority.

Modifications

- `get-netdomaintrust` now displays the SID of the trusted domain
- `NetRequester` object has now a `_resolve_sid()` function.
- pywerview now requires impacket [db71504](https://github.com/fortra/impacket/commit/db71504529008bdbdd900549f6e4293be2e32c88)
- `_get_netfqdn` in `LDAPRequester` now uses anonymous bind and root DSE to retrieve the fqdn
- code refactoring within requester.py

Bug fix

- Fixed an infinite recursion when using TLS and a wrong password (by jsherwood0)

Features

- pywerview now uses [ldap3-bleeding-edge](https://pypi.org/project/ldap3-bleeding-edge/). It will use it until [#1139](https://github.com/cannatag/ldap3/pull/1139) is merged and released.

Modifications

- When `LDAPInvalidCredentialsResult` is raised, pywerview parses the error code and displays it in human readable format.

Modifications

- Fix a bug in `get-objectacl` when the domain FQDN is longer than 2 "words" (aka the domain is something like foo.bar.local)
- Fix a bug in `find-gpocomputeradmin`
- `ALIAS_OBJECT` is now treated as group in `get-netgroupmember`
- Strip the trailing `\x00` while retrieving local disks (by Anhydrite)

Features

- new function: `get-objectowner`. You can use this function to retrieve owner of any Active Directory object.
- new attribute: `_well_known_rids` in `ADObject`. A (partial) list of well known RIDs.

Modifications

- better SPN patching: the realm part is ignored
- hunting functions are fixed
- hunting functions implement json output
- More well known SIDs