Examples improvements

• GetADUsers.py, GetNPUsers.py, GetUserSPNs.py and findDelegation.py:
  • Added dc-host option to connect to specific KDC using its FQDN or NetBIOS name (@rmaksimov and @0xdeaddood).
• GetNPUsers.py
  • Printing TGT in stdout despite -outputfile parameter (@alexisbalbachan and @Zamanry)
  • Fixed output hash format for AES128/256 (etype 17/18) (@erasmusc)
• GetUserSPNs.py:
  • Added LDAP paged search (@ThePirateWhoSmellsOfSunflowers and @SAERXCIT).
  • Added a -stealth flag to remove the SPN filter from the LDAP query (@clavoillotte).
  • Improved searchFilter (@ShutdownRepo)
  • Use LDAP paged search (@ThePirateWhoSmellsOfSunflowers)
• psexec.py:
  • Added support for name customization using a custom binary file (@Dramelac).
• smbexec.py:
  • Security fixes for privilege escalation vulnerabilities (@bugch3ck).
  • Fixed python3 compatibility issues, added workaround TCP over NetBIOS being disabled (@ljrk0)
• secretsdump.py:
  • Added a new option to extract only NTDS.DIT data for specific users based on an LDAP filter (@snovvcrash).
  • Security fixes for privilege escalation vulnerabilities (@bugch3ck).
• mssqlclient.py:
  • Added multiple new commands. Now supports xp_dirtree execution (@Mayfly277, @trietend and @TurtleARM).
• ntlmrelayx.py:
  • Added ability to trigger SQLShell when running ntlmrelayx in interactive mode (@sploutchy).
  • Added filter option to the socks command in ntlmrelayx CLI (@shoxxdj)
  • Added ability to register DNS records through LDAP.
• addcomputer.py, rbcd.py:
  • Allow weak TLS ciphers for LDAP connections (@AdrianVollmer)
• Get-GPPPassword.py:
  • Better handling of various XML files in Group Policy Preferences (@p0dalirius)
• smbclient.py:
  • Added recursive file listing (@Sq00ky)
• ticketer.py:
  • Ticket duration is now specified in hours instead of days (@Dramelac)
  • Added extra-pac implementation (@Dramelac)

New examples

• net.py Implementation of windows net.exe builtin tool (@NtAlexio2)
• changepasswd.py New example that allows password changing or reseting through multiple protocols (@Alef-Burzmali, @snovvcrash, @bransh, @api0cradle and @p0dalirius)
• DumpNTLMInfo.py New example that dumps remote host information in ntlm authentication model, without credentials. For SMB protocols v1, v2 and v3. (@NtAlexio2)