Commit Graph

1051 Commits (440e2df1f3a226172911b86c33cdda51a86650e0)

Author SHA1 Message Date
Marshall Hallenbeck e170f839f7 feat(mssqldb): update is_computer_valid to be the same as smbdb 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck c38117a8dd feat(mssqldb): update get_credentials to be the same as smbdb 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck 608304d5d5 feat(mssqldb): update is_credential_valid to be the same as smbdb 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck 75fcf0e666 feat(mssqldb): update remove_admin_relations to be the same as smbdb 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck 051a7c0e4b feat(mssqldb): update get_admin_relations to be the same as smbdb 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck 3b86e8c1fa feat(mssqldb): update add_admin_user to be the same as smbdb 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck 38854a59e4 feat(mssqldb): update remove_credentials to be the same as smbdb 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck f9ff7cef7a feat(mssqldb): update add_credential to be the same as smbdb 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck 0eb20ff3a2 feat(mssqldb): update add_computer to proper sqlalchemny syntax 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck 515209a4e0 feat(smbdb): only update hosts if they have changed to improve SQL write time 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck 3143b56060 logging(smbdb): update log string to better specify which add_computer() is being called 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck beaab6034e format(smbdb): change order of functions to match other database classes 2023-03-13 16:07:05 -04:00
Marshall Hallenbeck c211f53cbd feat(smbdb): add help_creds 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck d588b523e1 chore: remove old commented code 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck 121b25d243 feat(smbdb): update remaining functions to proper sqlalchemy syntax 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck 1d33c58059 refactor(smbdb): change all add_user references to add_credential and refactor some if statements 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck b25b74d473 chore: set asyncio logging level to CRITICAL to prevent unnecessary logging messages in debug mode 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck 97eb27bdfa fix(smbdb): update Upsert technique 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck 1bb0a476e0 feat(smbdb): work on fixing group sqlalchemy queries 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck 92c8d5bf20 update variable name 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck 1e5fec0b75 fix(smbdb): fix clear_database query 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck 17eda1767d fix(smbdb): reference inserted row id properly 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck fa6c20f76a feat(cmedb): add help string to hosts command 2023-03-13 16:06:16 -04:00
Marshall Hallenbeck 6056602a3d feat(cmedb): add help string to groups command 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 0d8824eaf4 feat(cmedb): add help string to shares command 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 0a58d95218 feat(cmedb): add print_help function to assist in printing help commands 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 526ec5373e fix comment 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck fde187e26e fix(cmedb): update get_computers to always return a list 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 3dd1daf87b feat(cmedb): update get_users to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck c8c8bbd531 feat(cmedb): update get_user to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck dc1a038474 feat(cmedb): update get_computers to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck ffb277fe55 feat(cmedb): update is_computer_valid to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck dfd18456a0 feat(cmedb): update get_groups to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 6c27da82ef feat(cmedb): update is_group_valid to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 5ca05031a9 feat(cmedb): update get_users_with_share_access to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 042f67ee73 feat(cmedb): update add_share to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck dc417119b6 fix(cmedb): fix db column reference 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck f1c8c0704b feat(cmedb): update get_group_relations to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 7bfd048078 feat(cmedb): update get_admin_relations to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 2f4b4c0a23 feat(cmedb): update get_credentials to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck d4fe0c18d8 feat(cmedb): update is_user_valid to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 22606143da fix(smbdb): update result query syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 2348fc7e13 fix(SAwarnings): add warning ignore for SAWarnings 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 29e673c885 feat(cmedb): update is_credentials_valid to use proper sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 6d24d0906a chore(cmedb): update formatting 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck d0e83c4b97 feat(cmedb): update cmedb.py to use proper sqlalchemy connection 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 9b2b1656b7 feat(smbdb): completely revamp get_shares_by_access function (needs testing) 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 75619809ad feat(cmedb): update get_shares sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 780ca00e32 feat(cmedb): update is_share_valid sqlalchemy syntax 2023-03-13 16:05:59 -04:00
Marshall Hallenbeck 8463829b5b feat(database): working on making database operations more async, reducing write concurrency issues, and fixing sqlalchemy query formats 2023-03-13 16:05:57 -04:00
Marshall Hallenbeck 06a82744cd WIP: improve computer add and update logic to reduce writes 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck bdc887ccae feat(mssqldb): update get_computers to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 4b5dfbb025 feat(mssqldb): update is_computer_valid to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck da1e788f23 feat(mssqldb): update get_credentials to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck b70cdc58e1 feat(mssqldb): update is_credential_valid to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 9e1b8fbe88 feat(mssqldb): update remove_admin_relations to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 70346c9c8a feat(mssqldb): update get_admin_relations to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 28b16538ed feat(mssqldb): update add_admin_user to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 54035df8b1 feat(mssqldb): update remove_credentials to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 876dd9d331 feat(mssqldb): update add_credential to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck a8f23e9ed9 chore(mssqldb): fix formatting 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck f33d254c83 feat(mssqldb): update add_computer to use sqlalchemny 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck b44b05a0fa small formatting fix in db_navigator 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck b4c189a2a7 small formatting fix 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 108629bc02 feat(smbdb): update additional user functions to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 484ab65aad feat(smbdb): update is_user_valid to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck a66b3a0a72 feat(smbdb): update is_credential_local to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 7401f48f82 feat(cmedb): update creds remove command to use sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck a634530128 feat(cmedb): add database column for count of members of groups from AD, and the last queried time of it. Additionally transition to sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 9094e2e80f fix(smbdb): fix extraneous commit call that was causing errors due to timing 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 5debcb793e chore(smbdb): fix formatting 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 1aec4ea798 refactor(cmedb): pass dbengine object instead of session object 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 165142b543 fix(smb-database): remove redundant commit calls 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 13a554ea20 chore: remove debug print statements 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 5c6fb5799c chore: remove commented code 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 0212f7bd28 feat(cmedb): update sql queries for groups command 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck c8b472321a feat(cmedb): update queries and fix parameter names 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 4c3f68925b chore(cmedb): remove debug print statements 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 86fa6d3437 chore(cmedb): remove unnecessary update_computer function 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck e34fdc2dda feat(database): update each protocol to use sqlalchemy table reference and add database clear function; closes #189 2023-03-13 16:05:03 -04:00
Marshall Hallenbeck 10e7180c20 chore(cmedb): fix small formatting 2023-03-13 16:03:52 -04:00
Marshall Hallenbeck 3dd7134898 chore(smb): fix formatting for smb.py 2023-03-13 16:03:50 -04:00
Marshall Hallenbeck 3c62a58008 fix(smb): update logging for shares 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck 18d2b273af feat(cmedb): update cmedb.groups sql queries to use sqlalchemy 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck 6d140bb1ce feat(cmedb): update some functions for smb.creds 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck bc2ba6a025 feat(cmedb): update queries for smb.hosts 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck 9185555c0f feat(cmedb): update db connection reference and one query 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck 7e2c9333fd refactor(cmedb): fix cursor connection reference 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck f9f8de0c74 fix(cmedb): import print_table from cmedb 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck f65a78a03e chore(cmedb): formatting fixes 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck 388f520103 WIP - cmedb update 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck e120efd347 chore(cmedb): fix formatting and other PEP8 violations 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck 4c9faccdfa remove debug prints and fix typo 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck ad5898ee3e feat(cmedb): WIP - update cmedb to use sqlalchemy connector 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck 218c9b745e feat(sqlalchemy): WIP - working sqlalchemy session object being passed 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck 1d5d558f99 fix(display table): properly check for new DB additions and clean up previous checks 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck 2aa198b601 feat(sqlalchemy): change DB connection to sqlalchemy and add it as a dependency 2023-03-13 15:58:36 -04:00
Marshall Hallenbeck dce692833c fix: correct cmedb import 2023-03-13 15:58:07 -04:00
Marshall Hallenbeck 5e9ea346fd feat(cmedb): add additional fields to smb db 2023-03-13 15:58:07 -04:00
Marshall Hallenbeck 50a74951c8 refactor: centralize shared path variables and improve cmedb intialization 2023-03-13 15:58:04 -04:00
Marshall Hallenbeck 23d8d588e8 chore(gitignore): add .idea to gitignore 2023-03-13 15:55:46 -04:00
mpgn d9fffd39ec
Merge pull request #10 from zblurx/dpapi
Store domain backupkey and dpapi secrets in cmedb
2023-03-13 13:08:55 +01:00
mpgn 23db90b853
Merge pull request #8 from zblurx/log
init log_mode
2023-03-13 12:44:20 +01:00
mpgn 510b425910
Merge pull request #11 from zblurx/ldap-signing
update ldap-checker
2023-02-28 17:04:58 +01:00
mpgn b03e87b96e update av json 2023-02-28 10:46:13 -05:00
zblurx 407ce0f796 update ldap-checker 2023-02-28 16:37:11 +01:00
mpgn 9ca90fcecc is_admin check wrong 2023-02-23 04:38:44 -05:00
mpgn c0b1d71cc8
Merge branch 'master' into dpapi 2023-02-22 20:43:47 +01:00
mpgn 26e0393a31 Add check to verify if latest version of cmedb is used 2023-02-22 14:41:58 -05:00
zblurx bf254506d0 fix column for cme dpapi browser 2023-02-22 14:02:36 +01:00
zblurx 7bfdd0a75d store dpapi secrets in cmedb 2023-02-22 13:58:53 +01:00
zblurx 393dfc3987 store domain backup key 2023-02-22 12:56:24 +01:00
zblurx 2a01b3eb19 add timestamp and check if new file 2023-02-22 10:50:40 +01:00
mpgn c294f87725 Improve output 2023-02-21 16:57:14 -05:00
mpgn 44e5020123 Add enum_av from @tothi 2023-02-21 16:28:53 -05:00
mpgn 862b2211a2 Improve argparse print 2023-02-21 15:06:37 -05:00
mpgn 522c91d1f6 Improve import os 2023-02-21 15:05:35 -05:00
mpgn 65c07f5311 Add custom logger file 2023-02-21 15:01:42 -05:00
mpgn b16dca4054 Improve logging file 2023-02-21 14:40:52 -05:00
mpgn 602e7bb020 add option to dump cookie dpapi 2023-02-19 15:35:37 -05:00
mpgn f381728740 add message when dumping dpapi 2023-02-19 08:33:05 -05:00
mpgn 681e821514 fix local auth dpapi check 2023-02-19 08:06:02 -05:00
mpgn 6919d477b7 fix logging test 2023-02-19 07:30:38 -05:00
mpgn 53931105ee small fix dpapi 2023-02-19 07:27:11 -05:00
zblurx 29ae75e6bf init log_mode 2023-02-17 14:20:16 +01:00
mpgn 63c49c0895 add check if da 2023-02-16 08:33:26 -05:00
mpgn 9a1e52f176 change logic for masterkey 2023-02-16 08:09:21 -05:00
mpgn 19a6c3887f merge master into pr 2023-02-16 08:04:23 -05:00
mpgn d5d2d54619 Rewrite all vnc module method 2023-02-16 06:24:07 -05:00
zblurx ffae9abf49 fix trycatch in dpapi 2023-02-14 11:15:14 +01:00
zblurx 057bd8e889 change wireless module 2023-02-14 11:12:39 +01:00
zblurx 56e07ae0f5 add rdcman module 2023-02-14 11:12:22 +01:00
zblurx 619d21bf6c fix firefox upgrade_conn 2023-02-14 11:12:12 +01:00
zblurx d5fb5cf36e change pydes to pycryptodomex 2023-02-14 10:00:12 +01:00
mpgn 8e9bbf14fb
Merge branch 'master' into master 2023-02-14 09:52:07 +01:00
mpgn ec4f9ddfec remove printf ldap bloodhound 2023-02-14 03:46:43 -05:00
Zak a185b7c860 Update masky module (v0.2.0) 2023-02-14 03:43:20 -05:00
Zak ada917cc02 Update masky module (v0.2.0) 2023-02-13 23:20:17 +01:00
Daahtk 324996c2e1 Update msol.py 2023-02-13 15:55:02 -05:00
Daahtk 1fb31248a9 Create msol_dump.ps1 2023-02-13 15:55:02 -05:00
Daahtk 02fd427e34 Update msol.py 2023-02-13 15:55:02 -05:00
Daahtk a2a844c3cb Update msol.py 2023-02-13 15:55:02 -05:00
Daahtk 34b88f80af Add the MSOL module to dump msol cleartext password
This module will dump the cleartext password for the user MSOL_XXXX on the Azure AD Connect server. This user has DCSync rights.
2023-02-13 15:55:02 -05:00
mpgn 3e2abb9e1e improve share filter 2023-02-13 15:53:55 -05:00
mpgn 7b64626c47 Add two module winscp and veeam dump 2023-02-13 08:32:43 -05:00
Alexander Neff dfb0eee317 Fix bugs and error handling 2023-02-13 08:32:40 -05:00
Alexander Neff 24a2ae4955 Added module to dump credentials from veeam sql db 2023-02-13 08:32:40 -05:00
Alexander Neff d782fec1ff Clean up code and add more logging 2023-02-13 08:32:34 -05:00
Alexander Neff 98620ecdf9 Clean up Code 2023-02-13 08:32:34 -05:00
Alexander Neff cb3f44efd1 Added ability to scan for winscp.ini files 2023-02-13 08:32:34 -05:00
Alexander Neff 1456307e11 Add check if MasterPassword is set for Winscp to skip the encryption 2023-02-13 08:32:34 -05:00
Alexander Neff 9685a8f1c6 Now extract all winscp credentials from registry by loading ntuser.dat dynamically from every user 2023-02-13 08:32:34 -05:00
Alexander Neff 840a2f6628 Extract all winscp credentials from all logged in users from registry 2023-02-13 08:32:34 -05:00
Alexander Neff ca988744f0 Add winscp registry extraction 2023-02-13 08:32:34 -05:00
Alex 02f43dc287 baseline for winscp_dump module 2023-02-13 08:32:34 -05:00
zblurx 6f198372ca merge firefox into dpapi core option 2023-02-13 11:48:12 +01:00
mpgn 0ca17cb8a7 Bump to version Bruce Wayne 2023-02-12 17:20:51 -05:00
mpgn a551244f38 Add option to only view readable/writable shares credit to @jenaye 2023-02-12 17:19:46 -05:00
lefayjey 877ebc28d5 Fix conf base for child domains 2023-02-12 16:19:35 -05:00
Julio Ureña 01de301ce1 Create groupmembership.py
A module to query the groups to which a user belongs.
2023-02-12 16:13:19 -05:00
mpgn 8c5f25a2db if ldaps then ldaps my friend 2023-02-12 16:11:22 -05:00
Cameron Stark 59e0e6b340 fix OUTPUT option description in spider_plus 2023-02-12 16:09:17 -05:00
mpgn 9f6db06846 Change output filename for winrm 2023-02-12 16:03:38 -05:00
Sunggwan Choi 909f44d155 Fix ldap-checker module pth auth using NT hash 2023-02-12 16:00:43 -05:00
mpgn 60a7d8bdc0 Fix issue #732 2023-02-12 15:59:52 -05:00
mpgn ce1293b12c check if user password expired for as-reproasting 2023-02-12 15:58:07 -05:00
Alexander Neff db5a36f4b5 Fix bug resulting in duplicate logging when using verbose 2023-02-12 09:21:50 -05:00
iLightThings e84f589902 Update nopac.py
Fixed spelling
2023-02-12 09:21:08 -05:00
Alexandre ZANNI c05d27b8d2 [chore] better grep 2023-02-12 09:18:41 -05:00
mpgn c36a0fe445 add fqdn to kerberos option 2023-02-12 09:17:27 -05:00
mpgn 72c01b0688 add fqdn to kerberos option 2023-02-12 09:14:30 -05:00
lefayjey 0a472e9366 Use hostname in user and passpol for kerberos 2023-02-12 09:14:22 -05:00
lefayjey 5f5884785f Fix ccache kerberos auth using rpc 2023-02-12 09:14:08 -05:00
mpgn 3b5d719d24 Simplify check 2023-02-12 08:52:22 -05:00
zblurx a4c53cab36 update firefox module 2023-02-10 15:57:10 +01:00
zblurx a0832f2190 add firefox module 2023-02-10 15:16:10 +01:00
zblurx 194499533d modify output 2023-02-09 15:34:25 +01:00
zblurx 5263a4647d modify output 2023-02-09 15:33:14 +01:00
zblurx aeb0c0ea5a fix bugs 2023-02-08 12:16:07 +01:00
zblurx 0d39dff6e9 upgrade version of dploot 2023-02-08 09:53:40 +01:00
zblurx 9aa4675032 added try catch 2023-02-08 09:14:18 +01:00
zblurx 10e3b32b62 fix kerberos auth 2023-02-07 22:22:40 +01:00
zblurx 3086559501 auto export of domain backup key 2023-02-07 15:32:19 +01:00
zblurx 33093c2d49 fix dpapi harversting 2023-02-07 14:51:01 +01:00
zblurx f790d95613 pass it to core option 2023-02-07 12:06:42 +01:00
mpgn 8939405c6e Forgot to add bloodhound file 2023-02-06 08:17:16 -05:00
mpgn 4335515d28 Rewrite all rdp module 2023-02-05 15:23:40 -05:00
mpgn 5696026ba0 Fix exec method with kerberos 2023-02-05 08:00:46 -05:00
mpgn eaf421b714 Bump to 5.4.4 2023-02-05 07:37:12 -05:00
mpgn 4a443fe946 Add bloodhound core feature + fix color on ldap proto 2023-02-05 05:43:12 -05:00
mpgn 0c02ed4c0b Add GMSA print id 2023-02-05 04:44:07 -05:00
mpgn 1ddddd5f47 Add samruser function with kerberos 2023-02-02 14:43:04 -05:00
mpgn bdab59472b Add ccache support for RDP auth 2023-02-01 06:04:13 -05:00
mpgn 7fef784481 Add VNC scan + screenshot 2023-01-31 15:20:47 -05:00
zblurx 66cd0799ab add comments and limit cert dump to clientauth cert 2023-01-23 10:12:28 +01:00
zblurx a25dad9705
Merge branch 'Porchetta-Industries:master' into master 2023-01-06 10:39:52 +01:00
mpgn f0645371f0 Use default proto_flow func for rdp 2023-01-04 12:26:37 -05:00
mpgn 83f8ffd006 Handle stacktrace with binary launch with wrong python version 2023-01-04 11:48:52 -05:00
mpgn 2c6b982f7f Remove openssl requirement 2023-01-02 06:55:03 -05:00
mpgn d00a9bafeb
Fix RDP login
Fix RDP login, major breaking change so it is also commited on the public repo
2023-01-02 12:43:27 +01:00
mpgn 16705ec0ea Bump to 5.4.3 2023-01-02 06:37:57 -05:00
mpgn 82f28df288 Fix rdp auth & add kerberos auth (plain/nthash) -k 2023-01-02 06:37:37 -05:00
mpgn a2225dc11c Bump to 5.4.2 for porchetta 2022-12-14 16:00:36 -05:00
mpgn af8cfa8011 Add new gmsa function <3 2022-12-14 15:45:51 -05:00
mpgn 31b18614e1 replace simple quote by double quote for export 2022-12-14 09:55:17 -05:00
mpgn 86823c90be Add try catch 2022-12-12 14:39:29 -05:00
mpgn 1051ec2e69 Fix smb nthash not display with kerberos 2022-12-12 14:39:29 -05:00
Shariq Malik b14fe7f94f Fixed bh_owned error on non-existing values
If a computer on the network has been compromised but is not listed in the Neo4j database. CME won't crash any more.
2022-12-12 14:39:29 -05:00
Julio Ureña 4bab776011 Fix --enabled option to dump only enabled accounts
This change allows the option to work as expected and also includes an option to grep a list of users.
2022-12-12 14:39:29 -05:00
Julio Ureña c2993a5888 Modify remove_credentials to allow "creds remove"
`creds remove CredID` was not working because the method was commented on, I also changed the table name from credentials to users.
2022-12-12 14:39:29 -05:00
Julio Ureña c04b2ba465 Fix cmedb displayed credentials for mssql
The columns were not in the correct order, which caused them to be displayed incorrectly. This change properly orders the way CMEDB displays credentials in the mssql protocol.
2022-12-12 14:39:29 -05:00
Julio Ureña 7f65c0eccb mssql - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos with the protocol mssql.
2022-12-12 14:39:29 -05:00
Julio Ureña 59b953c3f7 Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-12-12 14:39:29 -05:00
Julio Ureña 42a3d9375b Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-12-12 14:39:29 -05:00
mpgn 31542973d7 Fix smb nthash not display with kerberos 2022-11-29 17:05:15 -05:00
mpgn a4c89ef561 Bump to 5.4.1 2022-11-29 16:46:26 -05:00
mpgn 99cea583e9 Add kerberos compatibility for laps option 2022-11-29 16:46:25 -05:00
zblurx 6f7c99bb50
Merge branch 'Porchetta-Industries:master' into master 2022-11-25 17:25:16 +01:00
Shariq Malik a3046f657b Fixed bh_owned error on non-existing values
If a computer on the network has been compromised but is not listed in the Neo4j database. CME won't crash any more.
2022-11-25 16:58:52 +05:00
Julio Ureña 7c684bcffb
Fix --enabled option to dump only enabled accounts
This change allows the option to work as expected and also includes an option to grep a list of users.
2022-11-22 14:28:57 -04:00
zblurx 561fb6da57
Merge branch 'Porchetta-Industries:master' into master 2022-11-18 18:39:01 +01:00
Julio Ureña 81b53b9652
Modify remove_credentials to allow "creds remove"
`creds remove CredID` was not working because the method was commented on, I also changed the table name from credentials to users.
2022-11-17 11:18:13 -04:00
zblurx 3df3978cb0
Merge branch 'Porchetta-Industries:master' into master 2022-11-17 16:16:47 +01:00
zblurx 75d01e5cb6 init dpapi module 2022-11-17 16:16:10 +01:00
Julio Ureña 2c4be7b9e4
Fix cmedb displayed credentials for mssql
The columns were not in the correct order, which caused them to be displayed incorrectly. This change properly orders the way CMEDB displays credentials in the mssql protocol.
2022-11-17 09:27:01 -04:00
Julio Ureña 4a12e437fa
mssql - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos with the protocol mssql.
2022-11-16 16:39:44 -04:00
Julio Ureña bd5a3fe91d
Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-11-16 16:15:30 -04:00
Julio Ureña baceb06afd
Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-11-16 16:06:43 -04:00
mpgn db79f5a487 Bump to 5.4.1 2022-11-10 16:08:17 -05:00
mpgn 9d6c3fe67e Add kerberos compatibility for laps option 2022-11-10 16:07:41 -05:00
mpgn 25978c0be0
Update smb.py 2022-11-10 22:06:35 +01:00
mpgn 193ce4128e SMB kerberos better you can put ip whithout fqdn 2022-11-10 04:17:09 -05:00
mpgn a88a6e8552 Add catch for kerberos use-kcache option with error message 2022-11-09 16:59:53 -05:00
mpgn 667faa0d7b Add catch for kerberos use-kcache option 2022-11-09 16:56:57 -05:00
Julio Ureña a5c30851c0
Fix output always returning false
Based on Neo4j documentation https://neo4j.com/docs/api/python-driver/current/api.html#neo4j.Result I added some modification to the result variable.

The way it was code, `result.value()` always return 0.
2022-11-09 15:39:43 -04:00
Julio Ureña ba690f93fd
Added the option to select architecture (64 or 32)
The module only allowed 32 bits, with this change it is possible to select 32 bits or 64 bits architecture.
2022-11-09 07:07:29 -04:00
Julio Ureña ccfd9565e0
Fix #671 - handlekatz modules fail
handlekatz modules fail if directory /tmp/shared does not exist. I changed the directory from /tmp/shared to /tmp and the option description.
2022-11-08 11:14:00 -04:00
Julio Ureña 61757a2cd2
Fix #671 - procdump modules fail
procdump modules fail if directory /tmp/shared does not exist. I changed the directory from /tmp/shared to /tmp and the option description.
2022-11-08 11:13:05 -04:00
shoxxdj 0990b4fa8b bugfix : cant export csv 2022-11-08 15:15:54 +01:00
mpgn e4f6343646 Bump to 5.4.0 2022-11-08 05:08:23 -05:00
mpgn be6b0edd42
Merge pull request #662 from Porchetta-Industries/rdp
Bump aardwolf to version 0.2.0
2022-11-08 09:31:58 +01:00
mpgn 8fedcc48b7
Update rdp.py 2022-11-08 09:25:59 +01:00
mpgn 4562cea72a
Merge pull request #669 from juliourena/master
Fix #668 - Remove @requires_admin flag for WMI queries
2022-11-07 21:07:29 +01:00
mpgn 60e3dda195
Merge pull request #601 from Dfte/master
Add the Impersonate module
2022-11-07 12:26:37 +01:00
Julio Ureña 47a92590a6
Remove @requires_admin flag for WMI queries
Although not common, it is possible for a user to be assigned WMI privileges. Removing @requires_admin in case we do not have privileges to make queries to WMI we will receive an access denied error, which makes it clearer what is happening.
2022-11-04 07:45:47 -04:00
mpgn b2bcbe0ade Fix issue #667 with use-kcache option 2022-11-03 16:04:46 -04:00
mpgn 83180a6b68 ldap better error message 2022-11-03 15:56:38 -04:00
mpgn 49d68e0269 fix error with connection outside dc 2022-11-03 15:29:56 -04:00
mpgn 37f2555ab7 Merge branch 'screenrdp' into rdp 2022-11-02 15:39:17 -04:00
mpgn 33a3c61242 update rdp proto 2022-11-02 15:39:14 -04:00