More On-Prem Enumeration (RDP/ADFS/OWA)

[TheTechromancer]

msprobe is a python tool designed to find all sorts of on-prem Microsoft things like RDP, ADFS, Outlook Web App, etc., and squeeze useful information out of them.

Some of these features can probably fit into the current ntlm module, but others might require their own.

Also, it would be nice to raise any RDP/ADFS/OWA/NTLM instances as potentially-sprayable endpoints, similar to what we're doing currently with the oauth module.

Also relevant:

• https://github.com/absolomb/FindMeAccess per @aconite33

[TheTechromancer]

We can add the subdomains to massdns: #789.

[TheTechromancer]

Added on-prem subdomain list: #790.