GPO (Group Policy Object)

When you own a object that owns a GPO, you can write to the GPO and link it in the domain.

Creating a rogue task for the GPO

  • You will need to find the GPO id (can be found in bloodhound)

  • You will need credentials for the user that controls the GPO

Using pyGPOabuse we can create a task for the GPO:

LogoGitHub - Hackndo/pyGPOAbuse: Partial python implementation of SharpGPOAbuseGitHub

Linking GPO

Now that we created a rogue task, we also need to link the GPO to objects. We can do this by remotely by using a Python3 script for example:

LogoGitHub - 1ncendium/pyGPO: Python class for managing Group Policy Object remotelyGitHub

Or we can use BloodyAD:

PreviousFile TransferNextTools

Last updated