Skip to content

Commit 6d33592

Browse files
authored
Merge pull request #211 from TrimarcJake/TrimarcJake-patch-1
Update Deploy MkDocs.yml
2 parents 858916a + cd583da commit 6d33592

File tree

2 files changed

+3
-63
lines changed

2 files changed

+3
-63
lines changed

.github/workflows/Deploy MkDocs.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ on:
1010
branches:
1111
#- main # The branch you want to deploy from
1212
- testing
13-
paths: # Only deploy MkDocs when the contents of the docs folder change or when this workflow changes.
13+
paths: # Only deploy MkDocs when the contents of the docs folder change or when this workflow changes
1414
- 'Docs/**'
1515
- '.github/workflows/Deploy MkDocs.yml'
1616
- './mkdocs.yml'

Docs/index.md

+2-62
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,5 @@
11
<!-- markdownlint-disable MD033 -->
2-
32
# Locksmith
4-
53
```text
64
_ _____ _______ _ _ _______ _______ _____ _______ _ _
75
| | | | |____/ |______ | | | | | |_____|
@@ -11,9 +9,7 @@
119
\'-' .---'-''-'-' \'-' .--'--''-'-' \'-' .--'--'-''-'
1210
'--' '--' '--'
1311
```
14-
15-
A ~~tiny~~ small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
16-
12+
A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
1713
<!-- locksmith-badges-start -->
1814
![GitHub release](https://img.shields.io/github/v/release/trimarcjake/locksmith?sort=semver)
1915
![GitHub top language](https://img.shields.io/github/languages/top/trimarcjake/locksmith)
@@ -23,9 +19,7 @@ A ~~tiny~~ small tool built to find and fix common misconfigurations in Active D
2319
![GitHub Actions Workflow Status](https://img.shields.io/github/actions/workflow/status/trimarcjake/Locksmith/powershell.yml?logo=github&label=PSScriptAnalyzer)
2420
![PowerShell Gallery Downloads](https://img.shields.io/powershellgallery/dt/locksmith?logo=powershell&label=PowerShell%20Gallery%20Downloads&color=blue)
2521
<!-- locksmith-badges-end -->
26-
2722
## Contents
28-
2923
1. [Installation](#Installation)
3024
2. [Run Locksmith](#RunLocksmith)
3125
1. [Mode 0](#Mode0)
@@ -34,191 +28,137 @@ A ~~tiny~~ small tool built to find and fix common misconfigurations in Active D
3428
4. [Mode 3](#Mode3)
3529
5. [Mode 4](#Mode4)
3630
6. [Scans](#Scans)
37-
38-
&nbsp;
39-
4031
<a name="Installation" id="Installation"></a>
4132

4233
## Installation
4334

4435
### Prerequisites
45-
4636
1. Locksmith must be run on a domain joined system.
4737
2. The ActiveDirectory and ServerManager PowerShell modules must be installed before importing the Locksmith module.
4838
3. Administrative rights may be required for some checks and for remediation.
4939

50-
&nbsp;
51-
5240
### Standard Module Installation
53-
5441
Open a PowerShell prompt and install Locksmith from the PowerShell Gallery:
55-
5642
```powershell
5743
Install-Module -Name Locksmith -Scope CurrentUser
5844
```
5945

60-
&nbsp;
61-
6246
### Alternative Installation Methods
63-
6447
1. Download and Use the Module Without Installing It
65-
6648
1. Download the [latest module version](https://github.com/TrimarcJake/Locksmith/releases/latest/download/Locksmith.zip).
6749
2. Open a PowerShell prompt to the location of the extracted file and run:
68-
6950
```powershell
7051
Unblock-File .\Locksmith.zip # if necessary to unblock the download
7152
Expand-Archive .\Locksmith.zip
7253
Import-Module .\Locksmith\Locksmith.psd1
7354
Invoke-Locksmith
7455
```
75-
7656
2. Download the Standalone Script Without Module
77-
7857
1. Download the latest monolithic (all-in-one) script version: [https://github.com/TrimarcJake/Locksmith/releases/latest/download/Invoke-Locksmith.zip](https://github.com/TrimarcJake/Locksmith/releases/latest/download/Invoke-Locksmith.zip).
7958
2. Open a PowerShell prompt to the location of the downloaded file and run:
80-
8159
```powershell
8260
Unblock-File .\Invoke-Locksmith.zip
8361
Expand-Archive .\Invoke-Locksmith.zip -DestinationPath .\
8462
.\Invoke-Locksmith.ps1
8563
```
86-
87-
&nbsp;
88-
8964
<a name="RunLocksmith" id="RunLocksmith"></a>
9065

9166
## Run Locksmith
92-
9367
There are several modes you can chose from when running `Invoke-Locksmith`. You can also use the **Scans** parameter to choose which scans you want to invoke.
94-
&nbsp;
95-
&nbsp;
68+
9669
<a name="Mode0" id="Mode0"></a>
9770

9871
### Mode 0: Identify Issues, Output to Console (Default)
9972

10073
Running `Invoke-Locksmith.ps1` with no parameters or with `-Mode 0` will scan the current Active Directory forest and output all discovered AD CS issues to the console in **Table** format.
101-
10274
``` powershell
10375
# Module Syntax
10476
Invoke-Locksmith
10577
```
106-
10778
``` powershell
10879
# Script Syntax
10980
.\Invoke-Locksmith.ps1
11081
```
111-
11282
Example Output for Mode 0: <https://github.com/TrimarcJake/Locksmith/blob/main/examples/Mode0.md>
11383

114-
&nbsp;
115-
&nbsp;
11684
<a name="Mode1" id="Mode1"></a>
11785

11886
### Mode 1: Identify Issues and Fixes, Output to Console
119-
12087
This mode scans the current forest and outputs all discovered AD CS issues and possible fixes to the console in **List** format.
12188

12289
``` powershell
12390
# Module Syntax
12491
Invoke-Locksmith -Mode 1
12592
```
126-
12793
``` powershell
12894
# Script Syntax
12995
.\Invoke-Locksmith.ps1 -Mode 1
13096
```
131-
13297
Example Output for Mode 1: <https://github.com/TrimarcJake/Locksmith/blob/main/examples/Mode1.md>
13398

134-
&nbsp;
135-
&nbsp;
13699
<a name="Mode2" id="Mode2"></a>
137100

138101
### Mode 2: Identify Issues, Output to CSV
139-
140102
Locksmith Mode 2 scans the current forest and outputs all discovered AD CS issues to ADCSIssues.CSV in the present working directory.
141103

142104
``` powershell
143105
# Module Syntax
144106
Invoke-Locksmith -Mode 2
145107
```
146-
147108
``` powershell
148109
# Script Syntax
149110
.\Invoke-Locksmith.ps1 -Mode 2
150111
```
151-
152112
Example Output for Mode 2: <https://github.com/TrimarcJake/Locksmith/blob/main/examples/Mode2.md>
153113

154-
&nbsp;
155-
&nbsp;
156114
<a name="Mode3" id="Mode3"></a>
157115

158116
### Mode 3: Identify Issues and Fixes, Output to CSV
159-
160117
In Mode 3, Locksmith scans the current forest and outputs all discovered AD CS issues and example fixes to ADCSRemediation.CSV in the present working directory.
161-
162118
``` powershell
163119
# Module Syntax
164120
Invoke-Locksmith -Mode 3
165121
```
166-
167122
``` powershell
168123
# Script Syntax
169124
.\Invoke-Locksmith.ps1 -Mode 3
170125
```
171-
172126
Example Output for Mode 3: <https://github.com/TrimarcJake/Locksmith/blob/main/examples/Mode3.md>
173127

174-
&nbsp;
175-
&nbsp;
176128
<a name="Mode4" id="Mode4"></a>
177129

178130
### Mode 4: Fix All Issues
179-
180131
Mode 4 is the "easy button." Running Locksmith in Mode 4 will identify all misconfigurations and offer to fix each issue. If there is any possible operational impact, Locksmith will warn you.
181132

182133
``` powershell
183134
# Module Syntax
184135
Invoke-Locksmith -Mode 4
185136
```
186-
187137
``` powershell
188138
# Script Syntax
189139
.\Invoke-Locksmith.ps1 -Mode 4
190140
```
191-
192141
Example Output for Mode 4: <https://github.com/TrimarcJake/Locksmith/blob/main/examples/Mode4.md>
193142

194-
&nbsp;
195-
&nbsp;
196143
<a name="Scans" id="Scans"></a>
197144

198145
### Scans: Select Which Scans to Invoke
199-
200146
Use the `-Scans` parameter to choose which vulnerabilities to scan for. Acceptable values include `All`, `Auditing`, `ESC1`, `ESC2`, `ESC3`, `ESC4`, `ESC5`, `ESC6`, `ESC8`, `ESC11`, `ESC13`, `ESC15`, `EKEUwu`, or `PromptMe`. The `PromptMe` option presents an interactive list allowing you to select one or more scans.
201147

202148
``` powershell
203149
# Run all scans
204150
Invoke-Locksmith -Scan All
205151
```
206-
207152
``` powershell
208153
# Prompt the user for a list of scans to select
209154
Invoke-Locksmith.ps1 -Scans PromptMe
210155
```
211-
212156
``` powershell
213157
# Scan for ESC1 vulnerable paths
214158
Invoke-Locksmith.ps1 -Scans ESC1
215159
```
216-
217160
``` powershell
218161
# Scan for ESC1, ESC2, and ESC8 vulnerable paths
219162
Invoke-Locksmith.ps1 -Scans ESC1,ESC2,ESC8
220163
```
221-
222-
&nbsp;
223-
224164
Thank you for using Locksmith! 💜

0 commit comments

Comments
 (0)