Marshall Hallenbeck
e170f839f7
feat(mssqldb): update is_computer_valid to be the same as smbdb
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
c38117a8dd
feat(mssqldb): update get_credentials to be the same as smbdb
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
608304d5d5
feat(mssqldb): update is_credential_valid to be the same as smbdb
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
75fcf0e666
feat(mssqldb): update remove_admin_relations to be the same as smbdb
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
051a7c0e4b
feat(mssqldb): update get_admin_relations to be the same as smbdb
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
3b86e8c1fa
feat(mssqldb): update add_admin_user to be the same as smbdb
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
38854a59e4
feat(mssqldb): update remove_credentials to be the same as smbdb
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
f9ff7cef7a
feat(mssqldb): update add_credential to be the same as smbdb
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
0eb20ff3a2
feat(mssqldb): update add_computer to proper sqlalchemny syntax
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
515209a4e0
feat(smbdb): only update hosts if they have changed to improve SQL write time
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
3143b56060
logging(smbdb): update log string to better specify which add_computer() is being called
2023-03-13 16:07:07 -04:00
Marshall Hallenbeck
beaab6034e
format(smbdb): change order of functions to match other database classes
2023-03-13 16:07:05 -04:00
Marshall Hallenbeck
c211f53cbd
feat(smbdb): add help_creds
2023-03-13 16:06:18 -04:00
Marshall Hallenbeck
d588b523e1
chore: remove old commented code
2023-03-13 16:06:18 -04:00
Marshall Hallenbeck
121b25d243
feat(smbdb): update remaining functions to proper sqlalchemy syntax
2023-03-13 16:06:18 -04:00
Marshall Hallenbeck
1d33c58059
refactor(smbdb): change all add_user references to add_credential and refactor some if statements
2023-03-13 16:06:18 -04:00
Marshall Hallenbeck
b25b74d473
chore: set asyncio logging level to CRITICAL to prevent unnecessary logging messages in debug mode
2023-03-13 16:06:18 -04:00
Marshall Hallenbeck
97eb27bdfa
fix(smbdb): update Upsert technique
2023-03-13 16:06:18 -04:00
Marshall Hallenbeck
1bb0a476e0
feat(smbdb): work on fixing group sqlalchemy queries
2023-03-13 16:06:18 -04:00
Marshall Hallenbeck
92c8d5bf20
update variable name
2023-03-13 16:06:18 -04:00
Marshall Hallenbeck
1e5fec0b75
fix(smbdb): fix clear_database query
2023-03-13 16:06:18 -04:00
Marshall Hallenbeck
17eda1767d
fix(smbdb): reference inserted row id properly
2023-03-13 16:06:18 -04:00
Marshall Hallenbeck
fa6c20f76a
feat(cmedb): add help string to hosts command
2023-03-13 16:06:16 -04:00
Marshall Hallenbeck
6056602a3d
feat(cmedb): add help string to groups command
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
0d8824eaf4
feat(cmedb): add help string to shares command
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
0a58d95218
feat(cmedb): add print_help function to assist in printing help commands
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
526ec5373e
fix comment
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
fde187e26e
fix(cmedb): update get_computers to always return a list
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
3dd1daf87b
feat(cmedb): update get_users to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
c8c8bbd531
feat(cmedb): update get_user to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
dc1a038474
feat(cmedb): update get_computers to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
ffb277fe55
feat(cmedb): update is_computer_valid to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
dfd18456a0
feat(cmedb): update get_groups to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
6c27da82ef
feat(cmedb): update is_group_valid to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
5ca05031a9
feat(cmedb): update get_users_with_share_access to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
042f67ee73
feat(cmedb): update add_share to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
dc417119b6
fix(cmedb): fix db column reference
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
f1c8c0704b
feat(cmedb): update get_group_relations to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
7bfd048078
feat(cmedb): update get_admin_relations to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
2f4b4c0a23
feat(cmedb): update get_credentials to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
d4fe0c18d8
feat(cmedb): update is_user_valid to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
22606143da
fix(smbdb): update result query syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
2348fc7e13
fix(SAwarnings): add warning ignore for SAWarnings
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
29e673c885
feat(cmedb): update is_credentials_valid to use proper sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
6d24d0906a
chore(cmedb): update formatting
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
d0e83c4b97
feat(cmedb): update cmedb.py to use proper sqlalchemy connection
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
9b2b1656b7
feat(smbdb): completely revamp get_shares_by_access function (needs testing)
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
75619809ad
feat(cmedb): update get_shares sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
780ca00e32
feat(cmedb): update is_share_valid sqlalchemy syntax
2023-03-13 16:05:59 -04:00
Marshall Hallenbeck
8463829b5b
feat(database): working on making database operations more async, reducing write concurrency issues, and fixing sqlalchemy query formats
2023-03-13 16:05:57 -04:00
Marshall Hallenbeck
06a82744cd
WIP: improve computer add and update logic to reduce writes
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
bdc887ccae
feat(mssqldb): update get_computers to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
4b5dfbb025
feat(mssqldb): update is_computer_valid to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
da1e788f23
feat(mssqldb): update get_credentials to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
b70cdc58e1
feat(mssqldb): update is_credential_valid to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
9e1b8fbe88
feat(mssqldb): update remove_admin_relations to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
70346c9c8a
feat(mssqldb): update get_admin_relations to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
28b16538ed
feat(mssqldb): update add_admin_user to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
54035df8b1
feat(mssqldb): update remove_credentials to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
876dd9d331
feat(mssqldb): update add_credential to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
a8f23e9ed9
chore(mssqldb): fix formatting
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
f33d254c83
feat(mssqldb): update add_computer to use sqlalchemny
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
b44b05a0fa
small formatting fix in db_navigator
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
b4c189a2a7
small formatting fix
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
108629bc02
feat(smbdb): update additional user functions to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
484ab65aad
feat(smbdb): update is_user_valid to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
a66b3a0a72
feat(smbdb): update is_credential_local to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
7401f48f82
feat(cmedb): update creds remove command to use sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
a634530128
feat(cmedb): add database column for count of members of groups from AD, and the last queried time of it. Additionally transition to sqlalchemy
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
9094e2e80f
fix(smbdb): fix extraneous commit call that was causing errors due to timing
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
5debcb793e
chore(smbdb): fix formatting
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
1aec4ea798
refactor(cmedb): pass dbengine object instead of session object
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
165142b543
fix(smb-database): remove redundant commit calls
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
13a554ea20
chore: remove debug print statements
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
5c6fb5799c
chore: remove commented code
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
0212f7bd28
feat(cmedb): update sql queries for groups command
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
c8b472321a
feat(cmedb): update queries and fix parameter names
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
4c3f68925b
chore(cmedb): remove debug print statements
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
86fa6d3437
chore(cmedb): remove unnecessary update_computer function
2023-03-13 16:05:05 -04:00
Marshall Hallenbeck
e34fdc2dda
feat(database): update each protocol to use sqlalchemy table reference and add database clear function; closes #189
2023-03-13 16:05:03 -04:00
Marshall Hallenbeck
10e7180c20
chore(cmedb): fix small formatting
2023-03-13 16:03:52 -04:00
Marshall Hallenbeck
3dd7134898
chore(smb): fix formatting for smb.py
2023-03-13 16:03:50 -04:00
Marshall Hallenbeck
3c62a58008
fix(smb): update logging for shares
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
18d2b273af
feat(cmedb): update cmedb.groups sql queries to use sqlalchemy
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
6d140bb1ce
feat(cmedb): update some functions for smb.creds
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
bc2ba6a025
feat(cmedb): update queries for smb.hosts
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
9185555c0f
feat(cmedb): update db connection reference and one query
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
7e2c9333fd
refactor(cmedb): fix cursor connection reference
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
f9f8de0c74
fix(cmedb): import print_table from cmedb
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
f65a78a03e
chore(cmedb): formatting fixes
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
388f520103
WIP - cmedb update
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
e120efd347
chore(cmedb): fix formatting and other PEP8 violations
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
4c9faccdfa
remove debug prints and fix typo
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
ad5898ee3e
feat(cmedb): WIP - update cmedb to use sqlalchemy connector
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
218c9b745e
feat(sqlalchemy): WIP - working sqlalchemy session object being passed
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
1d5d558f99
fix(display table): properly check for new DB additions and clean up previous checks
2023-03-13 15:58:38 -04:00
Marshall Hallenbeck
2aa198b601
feat(sqlalchemy): change DB connection to sqlalchemy and add it as a dependency
2023-03-13 15:58:36 -04:00
Marshall Hallenbeck
dce692833c
fix: correct cmedb import
2023-03-13 15:58:07 -04:00
Marshall Hallenbeck
5e9ea346fd
feat(cmedb): add additional fields to smb db
2023-03-13 15:58:07 -04:00
Marshall Hallenbeck
50a74951c8
refactor: centralize shared path variables and improve cmedb intialization
2023-03-13 15:58:04 -04:00
Marshall Hallenbeck
23d8d588e8
chore(gitignore): add .idea to gitignore
2023-03-13 15:55:46 -04:00
mpgn
d9fffd39ec
Merge pull request #10 from zblurx/dpapi
...
Store domain backupkey and dpapi secrets in cmedb
2023-03-13 13:08:55 +01:00
mpgn
23db90b853
Merge pull request #8 from zblurx/log
...
init log_mode
2023-03-13 12:44:20 +01:00
mpgn
510b425910
Merge pull request #11 from zblurx/ldap-signing
...
update ldap-checker
2023-02-28 17:04:58 +01:00
mpgn
b03e87b96e
update av json
2023-02-28 10:46:13 -05:00
zblurx
407ce0f796
update ldap-checker
2023-02-28 16:37:11 +01:00
mpgn
9ca90fcecc
is_admin check wrong
2023-02-23 04:38:44 -05:00
mpgn
c0b1d71cc8
Merge branch 'master' into dpapi
2023-02-22 20:43:47 +01:00
mpgn
26e0393a31
Add check to verify if latest version of cmedb is used
2023-02-22 14:41:58 -05:00
zblurx
bf254506d0
fix column for cme dpapi browser
2023-02-22 14:02:36 +01:00
zblurx
7bfdd0a75d
store dpapi secrets in cmedb
2023-02-22 13:58:53 +01:00
zblurx
393dfc3987
store domain backup key
2023-02-22 12:56:24 +01:00
zblurx
2a01b3eb19
add timestamp and check if new file
2023-02-22 10:50:40 +01:00
mpgn
c294f87725
Improve output
2023-02-21 16:57:14 -05:00
mpgn
44e5020123
Add enum_av from @tothi
2023-02-21 16:28:53 -05:00
mpgn
862b2211a2
Improve argparse print
2023-02-21 15:06:37 -05:00
mpgn
522c91d1f6
Improve import os
2023-02-21 15:05:35 -05:00
mpgn
65c07f5311
Add custom logger file
2023-02-21 15:01:42 -05:00
mpgn
b16dca4054
Improve logging file
2023-02-21 14:40:52 -05:00
mpgn
602e7bb020
add option to dump cookie dpapi
2023-02-19 15:35:37 -05:00
mpgn
f381728740
add message when dumping dpapi
2023-02-19 08:33:05 -05:00
mpgn
681e821514
fix local auth dpapi check
2023-02-19 08:06:02 -05:00
mpgn
6919d477b7
fix logging test
2023-02-19 07:30:38 -05:00
mpgn
53931105ee
small fix dpapi
2023-02-19 07:27:11 -05:00
zblurx
29ae75e6bf
init log_mode
2023-02-17 14:20:16 +01:00
mpgn
63c49c0895
add check if da
2023-02-16 08:33:26 -05:00
mpgn
9a1e52f176
change logic for masterkey
2023-02-16 08:09:21 -05:00
mpgn
19a6c3887f
merge master into pr
2023-02-16 08:04:23 -05:00
mpgn
d5d2d54619
Rewrite all vnc module method
2023-02-16 06:24:07 -05:00
zblurx
ffae9abf49
fix trycatch in dpapi
2023-02-14 11:15:14 +01:00
zblurx
057bd8e889
change wireless module
2023-02-14 11:12:39 +01:00
zblurx
56e07ae0f5
add rdcman module
2023-02-14 11:12:22 +01:00
zblurx
619d21bf6c
fix firefox upgrade_conn
2023-02-14 11:12:12 +01:00
zblurx
d5fb5cf36e
change pydes to pycryptodomex
2023-02-14 10:00:12 +01:00
mpgn
8e9bbf14fb
Merge branch 'master' into master
2023-02-14 09:52:07 +01:00
mpgn
ec4f9ddfec
remove printf ldap bloodhound
2023-02-14 03:46:43 -05:00
Zak
a185b7c860
Update masky module (v0.2.0)
2023-02-14 03:43:20 -05:00
Zak
ada917cc02
Update masky module (v0.2.0)
2023-02-13 23:20:17 +01:00
Daahtk
324996c2e1
Update msol.py
2023-02-13 15:55:02 -05:00
Daahtk
1fb31248a9
Create msol_dump.ps1
2023-02-13 15:55:02 -05:00
Daahtk
02fd427e34
Update msol.py
2023-02-13 15:55:02 -05:00
Daahtk
a2a844c3cb
Update msol.py
2023-02-13 15:55:02 -05:00
Daahtk
34b88f80af
Add the MSOL module to dump msol cleartext password
...
This module will dump the cleartext password for the user MSOL_XXXX on the Azure AD Connect server. This user has DCSync rights.
2023-02-13 15:55:02 -05:00
mpgn
3e2abb9e1e
improve share filter
2023-02-13 15:53:55 -05:00
mpgn
7b64626c47
Add two module winscp and veeam dump
2023-02-13 08:32:43 -05:00
Alexander Neff
dfb0eee317
Fix bugs and error handling
2023-02-13 08:32:40 -05:00
Alexander Neff
24a2ae4955
Added module to dump credentials from veeam sql db
2023-02-13 08:32:40 -05:00
Alexander Neff
d782fec1ff
Clean up code and add more logging
2023-02-13 08:32:34 -05:00
Alexander Neff
98620ecdf9
Clean up Code
2023-02-13 08:32:34 -05:00
Alexander Neff
cb3f44efd1
Added ability to scan for winscp.ini files
2023-02-13 08:32:34 -05:00
Alexander Neff
1456307e11
Add check if MasterPassword is set for Winscp to skip the encryption
2023-02-13 08:32:34 -05:00
Alexander Neff
9685a8f1c6
Now extract all winscp credentials from registry by loading ntuser.dat dynamically from every user
2023-02-13 08:32:34 -05:00
Alexander Neff
840a2f6628
Extract all winscp credentials from all logged in users from registry
2023-02-13 08:32:34 -05:00
Alexander Neff
ca988744f0
Add winscp registry extraction
2023-02-13 08:32:34 -05:00
Alex
02f43dc287
baseline for winscp_dump module
2023-02-13 08:32:34 -05:00
zblurx
6f198372ca
merge firefox into dpapi core option
2023-02-13 11:48:12 +01:00
mpgn
0ca17cb8a7
Bump to version Bruce Wayne
2023-02-12 17:20:51 -05:00
mpgn
a551244f38
Add option to only view readable/writable shares credit to @jenaye
2023-02-12 17:19:46 -05:00
lefayjey
877ebc28d5
Fix conf base for child domains
2023-02-12 16:19:35 -05:00
Julio Ureña
01de301ce1
Create groupmembership.py
...
A module to query the groups to which a user belongs.
2023-02-12 16:13:19 -05:00
mpgn
8c5f25a2db
if ldaps then ldaps my friend
2023-02-12 16:11:22 -05:00
Cameron Stark
59e0e6b340
fix OUTPUT option description in spider_plus
2023-02-12 16:09:17 -05:00
mpgn
9f6db06846
Change output filename for winrm
2023-02-12 16:03:38 -05:00
Sunggwan Choi
909f44d155
Fix ldap-checker module pth auth using NT hash
2023-02-12 16:00:43 -05:00
mpgn
60a7d8bdc0
Fix issue #732
2023-02-12 15:59:52 -05:00
mpgn
ce1293b12c
check if user password expired for as-reproasting
2023-02-12 15:58:07 -05:00
Alexander Neff
db5a36f4b5
Fix bug resulting in duplicate logging when using verbose
2023-02-12 09:21:50 -05:00
iLightThings
e84f589902
Update nopac.py
...
Fixed spelling
2023-02-12 09:21:08 -05:00
Alexandre ZANNI
c05d27b8d2
[chore] better grep
2023-02-12 09:18:41 -05:00
mpgn
c36a0fe445
add fqdn to kerberos option
2023-02-12 09:17:27 -05:00
mpgn
72c01b0688
add fqdn to kerberos option
2023-02-12 09:14:30 -05:00
lefayjey
0a472e9366
Use hostname in user and passpol for kerberos
2023-02-12 09:14:22 -05:00
lefayjey
5f5884785f
Fix ccache kerberos auth using rpc
2023-02-12 09:14:08 -05:00
mpgn
3b5d719d24
Simplify check
2023-02-12 08:52:22 -05:00
zblurx
a4c53cab36
update firefox module
2023-02-10 15:57:10 +01:00
zblurx
a0832f2190
add firefox module
2023-02-10 15:16:10 +01:00
zblurx
194499533d
modify output
2023-02-09 15:34:25 +01:00
zblurx
5263a4647d
modify output
2023-02-09 15:33:14 +01:00
zblurx
aeb0c0ea5a
fix bugs
2023-02-08 12:16:07 +01:00
zblurx
0d39dff6e9
upgrade version of dploot
2023-02-08 09:53:40 +01:00
zblurx
9aa4675032
added try catch
2023-02-08 09:14:18 +01:00
zblurx
10e3b32b62
fix kerberos auth
2023-02-07 22:22:40 +01:00
zblurx
3086559501
auto export of domain backup key
2023-02-07 15:32:19 +01:00
zblurx
33093c2d49
fix dpapi harversting
2023-02-07 14:51:01 +01:00
zblurx
f790d95613
pass it to core option
2023-02-07 12:06:42 +01:00
mpgn
8939405c6e
Forgot to add bloodhound file
2023-02-06 08:17:16 -05:00
mpgn
4335515d28
Rewrite all rdp module
2023-02-05 15:23:40 -05:00
mpgn
5696026ba0
Fix exec method with kerberos
2023-02-05 08:00:46 -05:00
mpgn
eaf421b714
Bump to 5.4.4
2023-02-05 07:37:12 -05:00
mpgn
4a443fe946
Add bloodhound core feature + fix color on ldap proto
2023-02-05 05:43:12 -05:00
mpgn
0c02ed4c0b
Add GMSA print id
2023-02-05 04:44:07 -05:00
mpgn
1ddddd5f47
Add samruser function with kerberos
2023-02-02 14:43:04 -05:00
mpgn
bdab59472b
Add ccache support for RDP auth
2023-02-01 06:04:13 -05:00
mpgn
7fef784481
Add VNC scan + screenshot
2023-01-31 15:20:47 -05:00
zblurx
66cd0799ab
add comments and limit cert dump to clientauth cert
2023-01-23 10:12:28 +01:00
zblurx
a25dad9705
Merge branch 'Porchetta-Industries:master' into master
2023-01-06 10:39:52 +01:00
mpgn
f0645371f0
Use default proto_flow func for rdp
2023-01-04 12:26:37 -05:00
mpgn
83f8ffd006
Handle stacktrace with binary launch with wrong python version
2023-01-04 11:48:52 -05:00
mpgn
2c6b982f7f
Remove openssl requirement
2023-01-02 06:55:03 -05:00
mpgn
d00a9bafeb
Fix RDP login
...
Fix RDP login, major breaking change so it is also commited on the public repo
2023-01-02 12:43:27 +01:00
mpgn
16705ec0ea
Bump to 5.4.3
2023-01-02 06:37:57 -05:00
mpgn
82f28df288
Fix rdp auth & add kerberos auth (plain/nthash) -k
2023-01-02 06:37:37 -05:00
mpgn
a2225dc11c
Bump to 5.4.2 for porchetta
2022-12-14 16:00:36 -05:00
mpgn
af8cfa8011
Add new gmsa function <3
2022-12-14 15:45:51 -05:00
mpgn
31b18614e1
replace simple quote by double quote for export
2022-12-14 09:55:17 -05:00
mpgn
86823c90be
Add try catch
2022-12-12 14:39:29 -05:00
mpgn
1051ec2e69
Fix smb nthash not display with kerberos
2022-12-12 14:39:29 -05:00
Shariq Malik
b14fe7f94f
Fixed bh_owned error on non-existing values
...
If a computer on the network has been compromised but is not listed in the Neo4j database. CME won't crash any more.
2022-12-12 14:39:29 -05:00
Julio Ureña
4bab776011
Fix --enabled option to dump only enabled accounts
...
This change allows the option to work as expected and also includes an option to grep a list of users.
2022-12-12 14:39:29 -05:00
Julio Ureña
c2993a5888
Modify remove_credentials to allow "creds remove"
...
`creds remove CredID` was not working because the method was commented on, I also changed the table name from credentials to users.
2022-12-12 14:39:29 -05:00
Julio Ureña
c04b2ba465
Fix cmedb displayed credentials for mssql
...
The columns were not in the correct order, which caused them to be displayed incorrectly. This change properly orders the way CMEDB displays credentials in the mssql protocol.
2022-12-12 14:39:29 -05:00
Julio Ureña
7f65c0eccb
mssql - Retrieve username when using Kerberos Auth
...
This change allows the program to return the name of the user being authenticated when using Kerberos with the protocol mssql.
2022-12-12 14:39:29 -05:00
Julio Ureña
59b953c3f7
Add - Retrieve username when using Kerberos Auth
...
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-12-12 14:39:29 -05:00
Julio Ureña
42a3d9375b
Add - Retrieve username when using Kerberos Auth
...
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-12-12 14:39:29 -05:00
mpgn
31542973d7
Fix smb nthash not display with kerberos
2022-11-29 17:05:15 -05:00
mpgn
a4c89ef561
Bump to 5.4.1
2022-11-29 16:46:26 -05:00
mpgn
99cea583e9
Add kerberos compatibility for laps option
2022-11-29 16:46:25 -05:00
zblurx
6f7c99bb50
Merge branch 'Porchetta-Industries:master' into master
2022-11-25 17:25:16 +01:00
Shariq Malik
a3046f657b
Fixed bh_owned error on non-existing values
...
If a computer on the network has been compromised but is not listed in the Neo4j database. CME won't crash any more.
2022-11-25 16:58:52 +05:00
Julio Ureña
7c684bcffb
Fix --enabled option to dump only enabled accounts
...
This change allows the option to work as expected and also includes an option to grep a list of users.
2022-11-22 14:28:57 -04:00
zblurx
561fb6da57
Merge branch 'Porchetta-Industries:master' into master
2022-11-18 18:39:01 +01:00
Julio Ureña
81b53b9652
Modify remove_credentials to allow "creds remove"
...
`creds remove CredID` was not working because the method was commented on, I also changed the table name from credentials to users.
2022-11-17 11:18:13 -04:00
zblurx
3df3978cb0
Merge branch 'Porchetta-Industries:master' into master
2022-11-17 16:16:47 +01:00
zblurx
75d01e5cb6
init dpapi module
2022-11-17 16:16:10 +01:00
Julio Ureña
2c4be7b9e4
Fix cmedb displayed credentials for mssql
...
The columns were not in the correct order, which caused them to be displayed incorrectly. This change properly orders the way CMEDB displays credentials in the mssql protocol.
2022-11-17 09:27:01 -04:00
Julio Ureña
4a12e437fa
mssql - Retrieve username when using Kerberos Auth
...
This change allows the program to return the name of the user being authenticated when using Kerberos with the protocol mssql.
2022-11-16 16:39:44 -04:00
Julio Ureña
bd5a3fe91d
Add - Retrieve username when using Kerberos Auth
...
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-11-16 16:15:30 -04:00
Julio Ureña
baceb06afd
Add - Retrieve username when using Kerberos Auth
...
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-11-16 16:06:43 -04:00
mpgn
db79f5a487
Bump to 5.4.1
2022-11-10 16:08:17 -05:00
mpgn
9d6c3fe67e
Add kerberos compatibility for laps option
2022-11-10 16:07:41 -05:00
mpgn
25978c0be0
Update smb.py
2022-11-10 22:06:35 +01:00
mpgn
193ce4128e
SMB kerberos better you can put ip whithout fqdn
2022-11-10 04:17:09 -05:00
mpgn
a88a6e8552
Add catch for kerberos use-kcache option with error message
2022-11-09 16:59:53 -05:00
mpgn
667faa0d7b
Add catch for kerberos use-kcache option
2022-11-09 16:56:57 -05:00
Julio Ureña
a5c30851c0
Fix output always returning false
...
Based on Neo4j documentation https://neo4j.com/docs/api/python-driver/current/api.html#neo4j.Result I added some modification to the result variable.
The way it was code, `result.value()` always return 0.
2022-11-09 15:39:43 -04:00
Julio Ureña
ba690f93fd
Added the option to select architecture (64 or 32)
...
The module only allowed 32 bits, with this change it is possible to select 32 bits or 64 bits architecture.
2022-11-09 07:07:29 -04:00
Julio Ureña
ccfd9565e0
Fix #671 - handlekatz modules fail
...
handlekatz modules fail if directory /tmp/shared does not exist. I changed the directory from /tmp/shared to /tmp and the option description.
2022-11-08 11:14:00 -04:00
Julio Ureña
61757a2cd2
Fix #671 - procdump modules fail
...
procdump modules fail if directory /tmp/shared does not exist. I changed the directory from /tmp/shared to /tmp and the option description.
2022-11-08 11:13:05 -04:00
shoxxdj
0990b4fa8b
bugfix : cant export csv
2022-11-08 15:15:54 +01:00
mpgn
e4f6343646
Bump to 5.4.0
2022-11-08 05:08:23 -05:00
mpgn
be6b0edd42
Merge pull request #662 from Porchetta-Industries/rdp
...
Bump aardwolf to version 0.2.0
2022-11-08 09:31:58 +01:00
mpgn
8fedcc48b7
Update rdp.py
2022-11-08 09:25:59 +01:00
mpgn
4562cea72a
Merge pull request #669 from juliourena/master
...
Fix #668 - Remove @requires_admin flag for WMI queries
2022-11-07 21:07:29 +01:00
mpgn
60e3dda195
Merge pull request #601 from Dfte/master
...
Add the Impersonate module
2022-11-07 12:26:37 +01:00
Julio Ureña
47a92590a6
Remove @requires_admin flag for WMI queries
...
Although not common, it is possible for a user to be assigned WMI privileges. Removing @requires_admin in case we do not have privileges to make queries to WMI we will receive an access denied error, which makes it clearer what is happening.
2022-11-04 07:45:47 -04:00
mpgn
b2bcbe0ade
Fix issue #667 with use-kcache option
2022-11-03 16:04:46 -04:00
mpgn
83180a6b68
ldap better error message
2022-11-03 15:56:38 -04:00
mpgn
49d68e0269
fix error with connection outside dc
2022-11-03 15:29:56 -04:00
mpgn
37f2555ab7
Merge branch 'screenrdp' into rdp
2022-11-02 15:39:17 -04:00
mpgn
33a3c61242
update rdp proto
2022-11-02 15:39:14 -04:00