posts /

Microsoft AD DS - Encoding msDFS-TargetListv2

Posted Mon Mar 27 11:21:14 2023 Florian Lohoff

When looking for exporting the DFS targets from an AD DS dump created with ldifde you stumple upon tons of issues with bullshit microsoft creates.

First they create an .xml file with information, put this into the AD attribute msDFS-TargetListv2 and fuck up the base64 encoding beyond repair in ldifde:

See this?


Okay - this looks like base64 except the "\" at the beginning. Removing the \ breaks the base64 so you'll need them

After playing around a bit Microsoft fucked this up by replacing the needed "//" with "\".

I guess they simply pushed stuff after the base64 encoder through the filepath decoder or something.

Fucked up beyond repair