Linux-run Python implementation of SharpGPOAbuse that modifies an existing Active Directory Group Policy Object (GPO) to add an immediate scheduled task. A computer GPO task runs as SYSTEM on computers that process the policy; a user GPO task runs as the logged-on user. The default action adds a local administrator, while -command supplies a custom task command. The task definition is written to the GPO and takes effect when policy is processed; this is not direct immediate execution on a remote host.
Python
RESTRICTED_ACCESS_BLUR_MARKER