2015-12-30 00:29:05 +00:00
============
12/29/2015 - RELEASE 1.4
============
-Encompasses all changes since 1.3.1 tagged release
12/29/2015
----------
-Added situational_awareness/network/powerview/find_managed_security_groups to integrate @stufus' new code
-Fixed various issues with agent profile handling
-'DefaultProfile' option in listener menu is now tab-completable and can take a path to a profile.txt
12/28/2015
----------
-Merge of @stufus' Find-ManagedSecurityGroups code into PowerView.ps1 base
12/26/2015
----------
-Merge of @jamcut's situational_awareness/host/findtrusteddocuments module
2015-12-22 20:05:22 +00:00
12/22/2015
----------
-Sync of Kevin Robertson's lateral_movement/inveigh_relay module
2015-12-30 00:29:05 +00:00
-Sync @stufus' exfiltration/egresscheck module
2015-12-22 20:05:22 +00:00
-Added module menu dynamic sizing for prettified output
2015-12-30 00:29:05 +00:00
12/20/2015
----------
-hop.php redirector fix
2015-12-17 01:36:07 +00:00
12/16/2015
----------
-Sync of Kevin Robertson's collection/inveigh update
-Added trollsploit/rick_ascii
-Bug fixes
2015-12-11 22:56:25 +00:00
12/11/2015
----------
-Updated powerview.ps1
-Added situational_awareness/network/powerview/get_cached_rdpconnection
-Added situational_awareness/network/powerview/set_ad_object
-Added management/downgrade_account
2015-12-30 00:29:05 +00:00
-Merge of @mubix's setup automation
2015-12-11 22:56:25 +00:00
12/9/2015
---------
2015-12-30 00:29:05 +00:00
-Added credentials/mimikatz/cache and credentials/mimikatz/sam
2015-12-11 22:56:25 +00:00
2015-12-01 04:23:03 +00:00
11/30/2015
----------
-Combined persistence/debugger/* into persistence/misc/debugger
-Added SysWow64 option to management/spawn to spawn a 32-bit powershell.exe
-Added persistence/userland/backdoor_lnk
2015-11-29 16:58:16 +00:00
11/29/2015
----------
-Built several modules in management/mailraider/* to integrate @xorrior's MailRaider.ps1
11/28/2015
----------
-Merged @xorrior's FoxDump and ChromeDump modules
11/25/2015
----------
-Merged @rvrsh3ll's lateral_movement/invoke_sshcommand
11/24/2015
----------
-Added script autorun functionality
11/23/2015
----------
-Merged @rvrsh3ll's recon/http_login
2015-11-21 23:07:57 +00:00
11/21/2015
----------
-Merge of exploitation/exploit_jboss, bug fix
-Fix in case module returns None
2015-11-21 23:24:17 +00:00
-Merged debian setup.sh fix
-Merged non-interactive cert generation and added to setup.sh
2015-11-22 01:03:40 +00:00
-Fixed nested menu bug that caused buildup of "Agent X not active."
-Main display menu now shows each time "main" menu is entered
2015-11-21 23:07:57 +00:00
2015-11-08 23:51:57 +00:00
11/8/2015
---------
-All PowerUp modules now dynamically built from a single source file
-PowerUp bug fixes
-Added privesc/powerup/service_exe_restore, pulled logic from other modules
-Added management/spawnas to spawn agents with explicit credentials
-Debug functionality (--debug) now outputs the source of the last tasked script to ./LastTask.ps1
-Write-Verbose and Write-Debug lines now stripped from tasked scripts
2015-11-09 00:36:20 +00:00
-Added situational_awareness/network/powerview/get_forest module
2015-11-08 23:51:57 +00:00
2015-11-04 20:19:06 +00:00
11/4/2015
2015-11-08 23:51:57 +00:00
---------
2015-11-04 20:19:06 +00:00
-Added persistence/misc/add_netuser to add local/domain users
2015-11-02 19:52:46 +00:00
11/2/2015
---------
-Fixed small bug in TASK_CMD_WAIT response parsing
2015-12-30 00:29:05 +00:00
============
10/30/2015 - RELEASE 1.3.1
============
2015-10-30 16:08:57 +00:00
-Updated reflectivepick dlls to fix bug in injection and dll payload injection
============
2015-12-30 00:29:05 +00:00
10/29/2015 - RELEASE 1.3
2015-10-30 16:08:57 +00:00
============
-Encompasses all changes since 1.2 tagged release
2015-10-27 19:18:26 +00:00
10/26/2015
----------
-Fix for psinject bug due to lack of .NET 4.0 on target.
2015-10-27 19:20:41 +00:00
-Fix for bug in persistence/misc/add_sid_history
10/23/15
2015-10-30 16:08:57 +00:00
--------
2015-10-27 19:20:41 +00:00
-Updated powerview.ps1 source to Version 2.0
-Built a way to dynamically generate the stripped PowerView code for functions needed by PowerView modules (helpers -> generate_dynamic_powershell_script), and updated all relevant PowerView modules
-Renamed PowerView modules to better match PowerView 2.0 naming scheme and moved to situational_awareness/network/powerview/*
-Removed old split-out PowerView source files
-Removed situational_awareness/network/netview
-Combined stealth_userhunter into option for userhunter
-Added situational_awareness/network/get_forest_domain, situational_awareness/network/powerview/get_object_acl, situational_awareness/network/powerview/find_computer_field, situational_awareness/network/powerview/find_user_field, situational_awareness/network/powerview/get_ou, situational_awareness/network/powerview/get_group, situational_awareness/network/powerview/get_group_member, situational_awareness/network/powerview/get_gpo, situational_awareness/network/powerview/find_gpo_location, situational_awareness/network/powerview/find_gpo_computer_admin, situational_awareness/network/powerview/process_hunter, situational_awareness/network/powerview/find_foreign_group, situational_awareness/network/powerview/find_foreign_user
-renamed collection/filesearch to collection/find_interesting_file
2015-09-22 02:32:46 +00:00
9/21/2015
---------
-Fix for 'skywalker' file overwrite exploit on control server (thanks @zeroSteiner!)
2015-09-12 12:32:43 +00:00
9/12/2015
---------
-Added credentials/mimikatz/mimitokens to take advantage of Mimikatz' token listing/elevation
-Added management/enable_multi_rdp to patch terminal services to allow mutiple connections
-Fixed bug in write_dllhijacker that prevented the dll from being written out
2015-10-30 16:08:57 +00:00
2015-08-30 19:59:50 +00:00
============
8/30/2015 - RELEASE 1.2
============
-Encompasses all changes below
--- 'Native' shell commands in agent core ported to WMI equivalents
--- HMAC now uses SHA1 instead of MD5
--- Numerous bug fixes and UI tweaks throughout code
--- Six new modules and WAR stager added, /sids option added to golden_ticket
--- Fixed international locale bug with unicode text in agent.ps1
8/29/2015
---------
-HMAC algorithm for packet comms upgraded to use SHA1 instead of MD5
-credentials collected from collection/prompt now scraped/added to credential model
2015-08-27 00:22:26 +00:00
8/26/2015
---------
-Added module privesc/bypassuac_wscript
-Added module collection/inveigh
-Added stager war
2015-08-24 21:33:35 +00:00
8/24/2015
---------
-Added credentials/mimikatz/dcsync for remote DC credential extraction
-Added situational_awareness/network/get_domaintrusts
-Added /sids argument for credentials/mimikatz/golden_ticket
-Added credential parsing for dcsync output
-updated links for PowerTools
2015-08-24 22:42:32 +00:00
-Fixed bug in credential parsing with ":" inside of the password,username, or domain
2015-08-25 02:57:48 +00:00
-Fixed international locale bug with unicode text in agent.ps1. Now all results are base64 encoded prior to being packetized. Encoding will be handled at server.
2015-08-24 21:33:35 +00:00
2015-08-20 18:35:42 +00:00
8/20/2015
---------
-Continued porting native shell commands to WMI replacents in agent core
-In agent menu, 'shell CMD' now runs straight IEX CMD, and 'help agentcmds' shows safe aliases
-Modified ./setup/reset.sh to work from parent or ./setup/ folders
2015-08-23 21:18:13 +00:00
-Agent core functions streamlined
-"list [agents/listeners] <modifier>" should now be a global command
2015-08-20 18:35:42 +00:00
2015-08-19 17:14:14 +00:00
8/19/2015
---------
-Added collection/netripper, port of the NetRipper project
-Added collection/packet_capture for netsh event tracing
2015-08-19 19:51:36 +00:00
-Added management/zipfolder for native folder compression
-Corrected menu behavior on agent exit, bug fix on some dir behavior
2015-08-20 00:51:36 +00:00
-Started porting native shell commands to WMI in the agent core
2015-08-19 17:14:14 +00:00
2015-08-16 13:35:46 +00:00
============
8/16/2015 - RELEASE 1.1
============
-Encompasses all changes below
--- Crypto patch to prevent DOS condition
--- Numerous bug fixes throughout code
--- Extra modules added and HTA stager
--- Ability for agents to die after certain number of failed checkins
--- Added ability to easily remove "stale" agents
2015-08-15 21:58:44 +00:00
8/15/2015
---------
2015-08-16 05:05:35 +00:00
-Added modules management/timestomp, trollsploit/process_killer, persistence/elevated/wmi, situational_awareness/network/smbscanner, lateral_movement/invoke_psexec
2015-08-16 13:35:46 +00:00
-Accepted HTA Stager from subtee
2015-08-15 21:58:44 +00:00
2015-08-12 16:51:07 +00:00
8/12/2015
--------
-Merged in list stale and remove stale functionality
-Fixed delay in list stale feature
-Fixed active agent message in list stale feature
2015-08-12 22:51:24 +00:00
-Fixed registry storage in schtasks and registry persistence modules (userland and elevated)
2015-08-12 16:51:07 +00:00
2015-08-11 18:01:38 +00:00
8/11/2015
---------
-Merged in Lost Agent Detection
2015-08-12 01:48:21 +00:00
-"agents> remove X" now removes agents that checked in > X minutes ago
2015-08-12 01:59:19 +00:00
-"agents> list stale" and "agents> remove stale" now list/remove stale agents past their max checkins
2015-08-11 18:01:38 +00:00
2015-08-10 13:14:15 +00:00
8/10/2015
---------
-Fixed tab completion of usestager module
-Added dependencies for Ubuntu 14.04
-Fixed IP Whitelisting set from file
2015-08-10 22:50:18 +00:00
-Added "Lost Agent Detection". Allows the ability for an agent to die after a certain number of missed checkins. This is implemented via the "lostlimit" command. Default set to 60 missed checkins.
2015-08-10 13:14:15 +00:00
8/9/2015
----------
-Fixed flaw in crypto allowing a DOS condition.
-Added authentication to the AES crypto scheme to verify integrity of messages
8/6/2015
-----------
-Initial release. All components released
2015-10-27 19:18:26 +00:00
-Commited path fix to correct bug in certain modules
