Commit Graph

208 Commits (02cfaa90ac123dc6d02033f8be3faaf69fd851a0)

Author SHA1 Message Date
mpgn a551244f38 Add option to only view readable/writable shares credit to @jenaye 2023-02-12 17:19:46 -05:00
Alexandre ZANNI c05d27b8d2 [chore] better grep 2023-02-12 09:18:41 -05:00
mpgn 3b5d719d24 Simplify check 2023-02-12 08:52:22 -05:00
zblurx a0832f2190 add firefox module 2023-02-10 15:16:10 +01:00
zblurx 194499533d modify output 2023-02-09 15:34:25 +01:00
zblurx 5263a4647d modify output 2023-02-09 15:33:14 +01:00
zblurx aeb0c0ea5a fix bugs 2023-02-08 12:16:07 +01:00
zblurx 0d39dff6e9 upgrade version of dploot 2023-02-08 09:53:40 +01:00
zblurx 9aa4675032 added try catch 2023-02-08 09:14:18 +01:00
zblurx 10e3b32b62 fix kerberos auth 2023-02-07 22:22:40 +01:00
zblurx 3086559501 auto export of domain backup key 2023-02-07 15:32:19 +01:00
zblurx 33093c2d49 fix dpapi harversting 2023-02-07 14:51:01 +01:00
zblurx f790d95613 pass it to core option 2023-02-07 12:06:42 +01:00
mpgn 5696026ba0 Fix exec method with kerberos 2023-02-05 08:00:46 -05:00
mpgn 0c02ed4c0b Add GMSA print id 2023-02-05 04:44:07 -05:00
mpgn af8cfa8011 Add new gmsa function <3 2022-12-14 15:45:51 -05:00
mpgn 1051ec2e69 Fix smb nthash not display with kerberos 2022-12-12 14:39:29 -05:00
Julio Ureña 4bab776011 Fix --enabled option to dump only enabled accounts
This change allows the option to work as expected and also includes an option to grep a list of users.
2022-12-12 14:39:29 -05:00
Julio Ureña 59b953c3f7 Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-12-12 14:39:29 -05:00
Julio Ureña 42a3d9375b Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-12-12 14:39:29 -05:00
mpgn 31542973d7 Fix smb nthash not display with kerberos 2022-11-29 17:05:15 -05:00
mpgn 99cea583e9 Add kerberos compatibility for laps option 2022-11-29 16:46:25 -05:00
Julio Ureña 7c684bcffb
Fix --enabled option to dump only enabled accounts
This change allows the option to work as expected and also includes an option to grep a list of users.
2022-11-22 14:28:57 -04:00
Julio Ureña bd5a3fe91d
Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-11-16 16:15:30 -04:00
Julio Ureña baceb06afd
Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-11-16 16:06:43 -04:00
mpgn 9d6c3fe67e Add kerberos compatibility for laps option 2022-11-10 16:07:41 -05:00
mpgn 25978c0be0
Update smb.py 2022-11-10 22:06:35 +01:00
mpgn 193ce4128e SMB kerberos better you can put ip whithout fqdn 2022-11-10 04:17:09 -05:00
mpgn 667faa0d7b Add catch for kerberos use-kcache option 2022-11-09 16:56:57 -05:00
Julio Ureña 47a92590a6
Remove @requires_admin flag for WMI queries
Although not common, it is possible for a user to be assigned WMI privileges. Removing @requires_admin in case we do not have privileges to make queries to WMI we will receive an access denied error, which makes it clearer what is happening.
2022-11-04 07:45:47 -04:00
mpgn b2bcbe0ade Fix issue #667 with use-kcache option 2022-11-03 16:04:46 -04:00
mpgn 49d68e0269 fix error with connection outside dc 2022-11-03 15:29:56 -04:00
Julio Ureña 3eb80ae534
Modify logging output when putting files
Added \\ to match the correct display of the file and path.
2022-11-01 08:10:55 -04:00
Julio Ureña cc72c6c868
Remove @requires_admin from get_file and put_file
The @requires_admin flag prevents non-admin users who have Read and Write access to a shared folder from performing any operations.
2022-11-01 07:29:56 -04:00
mpgn a36d3145e1
Merge pull request #655 from zblurx/master
Fix kerberos authentication and add kerbrute
2022-10-31 13:34:03 +01:00
mpgn 3942eab31b update a little bit 2022-10-31 08:33:41 -04:00
mpgn fedbfaf1f5 Change default order of exec method for smb 2022-10-27 15:40:34 -04:00
mpgn 132332a8fd add new color for asreproast account smb 2022-10-24 10:02:01 -04:00
mpgn d61d6f0339 add new color for asreproast account 2022-10-24 09:59:43 -04:00
mpgn b62bd670e0 Don't block if account not green 2022-10-24 09:11:45 -04:00
mpgn 70f8d973cf add KDC_ERR_PREAUTH_FAILED error 2022-10-24 09:01:30 -04:00
mpgn 5040ab6b40 ldap try catch + magenta 2022-10-24 08:55:48 -04:00
zblurx b9699ab078 fix output modifs on smb protocol 2022-10-24 14:55:07 +02:00
zblurx 53b612d317 adapt outputed creds 2022-10-24 14:12:32 +02:00
mpgn 0a218c534f add magenta color if user exist but connection KO 2022-10-24 05:43:52 -04:00
mpgn ef349a5309 refactor check if admin func to be comptatible with kerberos 2022-10-24 05:26:53 -04:00
mpgn 0a284bd2b0 remove message CCache file is not found + fix exec method with kerberos 2022-10-22 17:29:56 -04:00
mpgn ed2b2b261a fix for kerberoast function 2022-10-22 16:38:29 -04:00
mpgn 7e0613c883 fix username to send to bh 2022-10-20 17:18:22 -04:00
mpgn 53f5791e7c Fix a lot things but good pr 2022-10-20 15:40:53 -04:00
zblurx f4485ff279 fix kerberos authentication 2022-10-20 18:08:30 +02:00
mpgn 0fc010b0d5 Fix except error 2022-10-13 08:20:22 -04:00
mpgn 105ad97947 quick fix cmedb export share 2022-09-22 18:24:27 -04:00
mpgn 65796271c0 Merge branch 'export' 2022-09-22 18:06:37 -04:00
mpgn 018bd9608a Update cmedb for shares 2022-09-22 18:05:18 -04:00
mpgn fad860df43 Update ntds dump with option user and enabled #455 2022-09-11 12:49:28 -04:00
Wlayzz b57ba767f8 Adding shebang and encoding utf-8 for all python files 2022-07-19 01:59:14 +02:00
mpgn 94a28cd184 revert back to pywerview 0.3.3 for better compatibility 2022-07-06 09:52:53 -04:00
mpgn 75e19ae4b2
Merge pull request #545 from Serizao/master
Add smbv1 and signing into sqlite database
2022-06-18 23:50:18 +02:00
mpgn 708e76d17a
Merge pull request #572 from shoxxdj/master
🚀 add support for filter user when searching for loggedon
2022-06-18 22:47:53 +02:00
mpgn 055eb25c71
Merge pull request #570 from snovvcrash/codec
Add -codec execution option
2022-06-17 22:12:54 +02:00
Gianfranco Alongi def9d4a562
Fixed instability issues for SMB (no _Connection crash, NetBIOSTimeout crash, UnsupportedFeature-crash) (#560)
* Fixed instability issues based - the smb mode will now not crash on
 SMB object not having _Connection
 NetBIOSTimeout
 UnsupportedFeature

* Forgotten return statement

* Improved logging logic

* Improved logging
2022-06-17 22:11:28 +02:00
shoxxdj d3b88088fc 🚀 add support for filter user when searching for loggedon 2022-04-27 11:04:23 +02:00
Sam Frees1de f183b6bcc1 Add -codec execution option 2022-04-26 16:58:03 +03:00
mpgn 47e6521822 Merge branch 'master' of https://github.com/byt3bl33d3r/CrackMapExec 2022-03-06 11:07:19 -05:00
TNeitzel 4dc4fd72c2 Add STATUS_NO_SUCH_FILE to success status
When the remote server returns a STATUS_NO_SUCH_FILE message, cme
interprets the login credentials as wrong. However, impackets
smbserver.py proves that this can be wrong.
2022-03-03 21:52:37 +01:00
Serizao 998b6a4f36
Update smb.py 2022-03-02 08:04:35 +01:00
Serizao 955ff4e4d3
Update smb.py 2022-03-02 08:00:26 +01:00
mpgn e15ae44c81 Push from public repo 2022-02-27 08:08:30 -05:00
mpgn b713723269 Add laps function for WinRM 2022-02-11 16:38:39 -05:00
mpgn 8d665375a8 Improve laps core functon 2022-02-10 16:36:07 -05:00
mpgn c3dec653d4 Add check for audit mode #523 2022-02-07 16:19:46 -05:00
mpgn 47dd3cdfc2 Add audit mode #523 2022-02-06 17:56:41 -05:00
HynekPetrak fdc2aadf2b sanitize IPv6 in a file name 2022-02-06 16:44:06 -05:00
mpgn 19a5896c1e Fix issue when local account is used with bh #533 2022-02-06 07:33:49 -05:00
mpgn 766ee48328 Fix kerberos ntds dump 2022-01-19 13:13:05 -05:00
mpgn d90709bd97 Fix exception 2021-12-18 15:33:46 -05:00
mpgn 66621b9014 Merger master public to sponsor version 2021-12-17 15:45:21 -05:00
brightio 2628a427d8
Fix a number of unhandled expections in cme/protocols/smb.py 2021-12-11 14:57:37 +01:00
mpgn e979dfe4f9 Add bloodhound core feature 2021-11-20 16:37:14 -05:00
mpgn b31ffc1a64 Improve laps core function 2021-11-17 07:37:20 -05:00
mpgn 0f5fe00f9e Fix ldap kerberos login 2021-11-01 14:27:14 -04:00
mpgn 23b0ff2a0c Add parameter to laps option 2021-10-17 14:41:20 -04:00
mpgn fcddee656e Update laps core function 2021-10-17 11:50:29 -04:00
mpgn ef1e5d3fb1 Add laps option to smb proto first version 2021-10-16 18:08:07 -04:00
mpgn 0000854b82 Remove filess method 2021-09-21 11:21:40 -04:00
mpgn 2942be1188 Add timeout to smb connection to 2 sec by default, much much better 2021-09-21 11:21:16 -04:00
mpgn fdf6cd31db
Merge pull request #2 from mpgn/dev3
Push dev branch to master
2021-09-18 23:04:16 +02:00
mpgn 53a51a02f2 Fix #464 thanks Wil 2021-09-18 22:44:48 +02:00
mpgn a31d03a99a Fix #486 with ntds dump thx @b13bs 2021-09-18 22:44:48 +02:00
mpgn c3516fe9d5 Merge branch 'master' of https://github.com/Porchetta-Industries/CrackMapExec 2021-06-28 13:25:31 -04:00
mpgn 091915b990 Fix and add a lot, check commit message
Update LDAP proto:
	- can fetch a LDAP domain from an account from another domain (trust relation between forest)
	- fix sizeLimit to unlimited on LDAP queries
	- fix little mistake in LDAP modules

Update SMB proto:
	- fix users function when DC is vulnerable to NULL SESSION
	- add SAMRPC function to fetch users on the domain
	- add option --computers to fetch all computers

Update CLI
	- add function export, but it's not tested
2021-06-24 14:38:24 -04:00
mpgn 215c479957 Fix spelling mistake 2021-05-30 16:28:37 -04:00
mpgn 3ade69abed
Fix missing try catch on --shares option
Thx to @0xdf report !
2021-04-02 19:25:06 +02:00
mpgn d2f0b66ae4 Add option --amsi-bypass allowing you to pass a custom amsi bypass when using option -X 2021-02-28 09:48:50 -05:00
mpgn ba91408c74 Fix smb error not correctly catched 2021-01-29 11:30:05 -05:00
mpgn b2a53dc896 Better null session handle 2021-01-29 05:53:40 -05:00
mpgn d53343369b Fix function name sessions option 2021-01-27 05:49:23 -05:00
mpgn 7210bc1eae Add better error management for --shares 2020-12-09 17:12:58 -05:00
byt3bl33d3r cb5c8855ed Version 5.1.3 🔥
- Replaced Gevent with AsyncIO
- Shares are now logged in the database and can be queried
- You can now press enter while a scan is being performed and CME will
  give you a completion percentage and the number of hosts remaining to
  scan
2020-11-15 16:42:28 -07:00