Skip to content

[Module Enhancement] Entra ID module update#1100

Open
Mauriceter wants to merge 3 commits intoPennyw0rth:mainfrom
Mauriceter:hybrid
Open

[Module Enhancement] Entra ID module update#1100
Mauriceter wants to merge 3 commits intoPennyw0rth:mainfrom
Mauriceter:hybrid

Conversation

@Mauriceter
Copy link
Contributor

@Mauriceter Mauriceter commented Feb 9, 2026

Description

This PR updates the entra-id module to detect other possible way to pivot from OnPrem domain to Entra ID.

  • Microsoft Entra Connect - Same logic as before
  • Desktop/Seamless SSO - detect AZUREADSSOACC$ account
  • Cloud Sync - Search for the default GMSA account
  • ADFS - search for the ADFS object and related account and spn

Type of change

Insert an "x" inside the brackets for relevant items (do not delete options)

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Deprecation of feature or functionality
  • This change requires a documentation update
  • This requires a third party update (such as Impacket, Dploot, lsassy, etc)

Setup guide for the review

All installers for AAD connect and cloud sync can be found in the Entra Connect page of https://entra.microsoft.com

Screenshots (if appropriate):

image

This also fix the unhandled error when a the AAD connect fqdn can't be resolved.

image

Checklist:

Insert an "x" inside the brackets for completed and relevant items (do not delete options)

  • I have ran Ruff against my changes (via poetry: poetry run python -m ruff check . --preview, use --fix to automatically fix what it can)
  • I have added or updated the tests/e2e_commands.txt file if necessary (new modules or features are required to be added to the e2e tests)
  • New and existing e2e tests pass locally with my changes
  • If reliant on changes of third party dependencies, such as Impacket, dploot, lsassy, etc, I have linked the relevant PRs in those projects
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation (PR here: https://github.com/Pennyw0rth/NetExec-Wiki)

@Mauriceter
Copy link
Contributor Author

I am wondering if I should add an optionnal check on services present on the AAD connect server to check if PHS or PTA is used.

@NeffIsBack
Copy link
Member

Thanks for the PR, looks cool!

@NeffIsBack NeffIsBack added the enhancement New feature or request label Feb 10, 2026
@NeffIsBack
Copy link
Member

I am wondering if I should add an optionnal check on services present on the AAD connect server to check if PHS or PTA is used.

We would probably need SMB for that and while this is an LDAP module I don't think that would fit here. Maybe in another module. Also see #950

@Mauriceter
Copy link
Contributor Author

Yes exactly, I was thinking of checking it the same way it is done with enum_av. I won't add it as an option then.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants