# GoldenCopy
You encounter limitations with your golden tickets (DACLs, detection)?
GoldenCopy retrieves all the information (ID, groups, etc) of a specific user in a neo4j database (bloodhound) and prepares the mimikatz/ticketer command to impersonate his permissions.
## Installation
**GoldenCopy** works with python >= 3.6
### Using pip
```bash
python3 -m pip install GoldenCopy
```
PyPi repository: https://pypi.org/project/GoldenCopy/
### From source
```bash
git clone https://github.com/Dramelac/GoldenCopy.git
cd GoldenCopy
python3 setup.py install
```
## Examples
- Impersonating 'john@domain.local' using default localhost neo4j (neo4j/exegol4thewin) database:
```bash
goldencopy john@domain.local
```
- Impersonating 'DC1' computer using default database connection:
```bash
goldencopy 'DC1$'
```
- Custom neo4j DB:
```bash
goldencopy -b neo4j.server.local -u neo4juser -p neo4jpass john@domain.local
```
- Adding stealth mode:
```bash
goldencopy -b bolt://neo4j.server.local:7687 -u neo4juser -p neo4jpass -s john@domain.local
```
- Using specific tools:
```bash
goldencopy -t mimikatz john@domain.local
```
```bash
goldencopy -t ticketer john@domain.local
```
## Usages
```
usage: goldencopy.py [-h] [-v] [-b BOLT] [-u USERNAME] [-p PASSWORD]
[-t {mimikatz,ticketer,all}] [-s] [-k KRBTGT] [-g GROUPS]
[--sid SID] [-c CUSTOM]
target_user
GoldenCopy - Copy the properties and groups of a user from neo4j to create an
identical golden ticket
positional arguments:
target_user Target user to copy (format: <username>[@<domain>])
optional arguments:
-h, --help show this help message and exit
-v, --verbose Enable verbose logging
Neo4j connection configuration:
-b BOLT, --bolt BOLT Neo4j bolt connexion (default: bolt://127.0.0.1:7687)
-u USERNAME, --username USERNAME
Neo4j username (default : neo4j)
-p PASSWORD, --password PASSWORD
Neo4j password (default : exegol4thewin)
Ticket configuration:
-t {mimikatz,ticketer,all}, --tools {mimikatz,ticketer,all}
Ticket creation tools (default : all)
-s, --stealth Stealth mode (default : disable)
-k KRBTGT, --krbtgt KRBTGT
KRBTGT RC4,AES Key
Advanced ticket configuration:
-g GROUPS, --groups GROUPS
Manually add extra group ids (can be separated by
commas)
--sid SID Manually add extra sids (SID history) (can be
separated by commas)
-c CUSTOM, --custom CUSTOM
Custom options
```
Raw data
{
"_id": null,
"home_page": "https://github.com/Dramelac/GoldenCopy",
"name": "GoldenCopy",
"maintainer": null,
"docs_url": null,
"requires_python": "<4,>=3.6",
"maintainer_email": null,
"keywords": "pentest redteam goldenticket goldencopy",
"author": "Dramelac",
"author_email": "dramelac@pm.me",
"download_url": "https://files.pythonhosted.org/packages/c6/f2/9307ed8f33b1765b66fbd634243511eb58457a7c3427e39230a7abcd5231/goldencopy-1.6.tar.gz",
"platform": null,
"description": "# GoldenCopy\n\nYou encounter limitations with your golden tickets (DACLs, detection)? \nGoldenCopy retrieves all the information (ID, groups, etc) of a specific user in a neo4j database (bloodhound) and prepares the mimikatz/ticketer command to impersonate his permissions.\n\n## Installation\n\n**GoldenCopy** works with python >= 3.6\n\n### Using pip\n```bash\npython3 -m pip install GoldenCopy\n```\nPyPi repository: https://pypi.org/project/GoldenCopy/\n\n### From source\n```bash\ngit clone https://github.com/Dramelac/GoldenCopy.git\ncd GoldenCopy\npython3 setup.py install\n```\n\n## Examples\n\n- Impersonating 'john@domain.local' using default localhost neo4j (neo4j/exegol4thewin) database:\n```bash\ngoldencopy john@domain.local\n```\n- Impersonating 'DC1' computer using default database connection:\n```bash\ngoldencopy 'DC1$'\n```\n- Custom neo4j DB:\n```bash\ngoldencopy -b neo4j.server.local -u neo4juser -p neo4jpass john@domain.local\n```\n- Adding stealth mode:\n```bash\ngoldencopy -b bolt://neo4j.server.local:7687 -u neo4juser -p neo4jpass -s john@domain.local\n```\n- Using specific tools:\n```bash\ngoldencopy -t mimikatz john@domain.local\n```\n```bash\ngoldencopy -t ticketer john@domain.local\n```\n\n## Usages\n\n```\nusage: goldencopy.py [-h] [-v] [-b BOLT] [-u USERNAME] [-p PASSWORD]\n [-t {mimikatz,ticketer,all}] [-s] [-k KRBTGT] [-g GROUPS]\n [--sid SID] [-c CUSTOM]\n target_user\n\nGoldenCopy - Copy the properties and groups of a user from neo4j to create an\nidentical golden ticket\n\npositional arguments:\n target_user Target user to copy (format: <username>[@<domain>])\n\noptional arguments:\n -h, --help show this help message and exit\n -v, --verbose Enable verbose logging\n\nNeo4j connection configuration:\n -b BOLT, --bolt BOLT Neo4j bolt connexion (default: bolt://127.0.0.1:7687)\n -u USERNAME, --username USERNAME\n Neo4j username (default : neo4j)\n -p PASSWORD, --password PASSWORD\n Neo4j password (default : exegol4thewin)\n\nTicket configuration:\n -t {mimikatz,ticketer,all}, --tools {mimikatz,ticketer,all}\n Ticket creation tools (default : all)\n -s, --stealth Stealth mode (default : disable)\n -k KRBTGT, --krbtgt KRBTGT\n KRBTGT RC4,AES Key\n\nAdvanced ticket configuration:\n -g GROUPS, --groups GROUPS\n Manually add extra group ids (can be separated by\n commas)\n --sid SID Manually add extra sids (SID history) (can be\n separated by commas)\n -c CUSTOM, --custom CUSTOM\n Custom options\n```\n",
"bugtrack_url": null,
"license": "GNU",
"summary": "Copy the properties and groups of a user or computer from neo4j (bloodhound) to create an identical golden ticket.",
"version": "1.6",
"project_urls": {
"Bug Reports": "https://github.com/Dramelac/GoldenCopy/issues",
"Homepage": "https://github.com/Dramelac/GoldenCopy",
"Source": "https://github.com/Dramelac/GoldenCopy"
},
"split_keywords": [
"pentest",
"redteam",
"goldenticket",
"goldencopy"
],
"urls": [
{
"comment_text": "",
"digests": {
"blake2b_256": "c6f29307ed8f33b1765b66fbd634243511eb58457a7c3427e39230a7abcd5231",
"md5": "9641ddab79aa531829041b5f65c295dd",
"sha256": "33113256a4e514b52e98e8e250e9cb614db42afdb285bd3b1ba9307d8256969b"
},
"downloads": -1,
"filename": "goldencopy-1.6.tar.gz",
"has_sig": false,
"md5_digest": "9641ddab79aa531829041b5f65c295dd",
"packagetype": "sdist",
"python_version": "source",
"requires_python": "<4,>=3.6",
"size": 19017,
"upload_time": "2024-05-06T09:47:02",
"upload_time_iso_8601": "2024-05-06T09:47:02.602959Z",
"url": "https://files.pythonhosted.org/packages/c6/f2/9307ed8f33b1765b66fbd634243511eb58457a7c3427e39230a7abcd5231/goldencopy-1.6.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2024-05-06 09:47:02",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "Dramelac",
"github_project": "GoldenCopy",
"travis_ci": false,
"coveralls": false,
"github_actions": true,
"requirements": [],
"lcname": "goldencopy"
}
JSON
