Commit Graph

3033 Commits (67b6acb30ac41636827b33159fde80a297ee93ac)

Author SHA1 Message Date
Xiaoli Chan 67b6acb30a [winrm] Add comment about dos attack
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-07 12:23:52 +08:00
Xiaoli Chan 3d2f3e1f8c [winrm] args info
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-07 03:50:16 +08:00
Xiaoli Chan c69583f49f [winrm] improve sam & lsa dump
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-07 03:45:58 +08:00
Xiaoli Chan 2247bb5f31 [winrm] use 'cmd /c' when command running in powershell
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-07 02:07:53 +08:00
Xiaoli Chan e6934000b4 [winrm] ruff
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-07 02:04:15 +08:00
Xiaoli Chan 957b15aaef [winrm] try catch in sam & lsa
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-07 01:55:10 +08:00
Xiaoli Chan 7b10dcefd4 [winrm] revert args to old one
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-07 01:36:28 +08:00
Xiaoli Chan 79dfbba09b [winrm] mpgn: local-auth review
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 22:20:32 +08:00
Xiaoli Chan 06cbb35158 [winrm] ugly if condition
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 13:48:28 +08:00
Xiaoli Chan 9bbab6b47d [winrm] clean
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 04:09:56 +08:00
Xiaoli Chan 415cd1afa0 [winrm] Fix local auth
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 04:08:57 +08:00
Xiaoli Chan 112c172403 [winrm] ruff
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 03:35:42 +08:00
Xiaoli Chan 2b4ea74922 [winrm] fix mpgn test issues
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 03:32:06 +08:00
Xiaoli Chan d80abb4be9 [winrm] improve enum
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 03:24:35 +08:00
Xiaoli Chan 234987b97e [winrm] improve logger
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 02:26:25 +08:00
Xiaoli Chan 8059a6b159 [winrm] self review
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 02:12:12 +08:00
Xiaoli Chan 892a411ea3 [winrm] more make sense
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 02:07:06 +08:00
Xiaoli Chan e85fe3c4f2 [winrm] marshall review
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 02:03:20 +08:00
Xiaoli Chan e1a4da1cea [winrm] ruff
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 01:53:04 +08:00
Xiaoli Chan 6e562cdfa6 [winrm] ruff
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 01:50:37 +08:00
Xiaoli Chan 9b475c32ed [winrm] marshall review
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 01:45:25 +08:00
Xiaoli Chan c38deee8d8 [winrm] conflict fix
Signed-off-by: Xiaoli Chan <2209553467@qq.com>
2023-11-06 01:04:17 +08:00
Marshall Hallenbeck 470b4e88cc
Merge pull request #90 from Pennyw0rth/neff-bh-pc
Set computer accounts as owned in bloodhound if local admin privs
2023-11-04 16:40:05 -04:00
XiaoliChan ffa2d8918d [winrm] clean up
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-11-04 23:28:33 +08:00
XiaoliChan 2bf2c30e01 [winrm] ruff
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-11-04 23:19:52 +08:00
XiaoliChan 40f30af119 [winrm] controversial: revert kerberos implement
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-11-04 23:13:27 +08:00
XiaoliChan 88f7ab3a6f Merge remote-tracking branch 'upstream/develop' into winrm-improv 2023-11-04 22:55:30 +08:00
Alexander Neff 96ad5721f5 Functionalyze bloodhound connector, improve handling bloodhound connection without a domain 2023-11-03 20:24:43 -04:00
Alexander Neff d5631cfa60 Move logging output above adding user to bloodhound 2023-11-03 20:23:15 -04:00
Alexander Neff 4f7264312f Merge branch 'develop' into neff-bh-pc 2023-11-03 17:25:45 -04:00
Alex e046a67775
Merge pull request #88 from Pennyw0rth/neff-neo4j
Improve bloodhound connector with Netbios domain name
2023-11-03 17:16:49 -04:00
Alexander Neff 3b466a3c9e Merge branch 'develop' into neff-neo4j 2023-11-03 16:58:01 -04:00
Marshall Hallenbeck 1156bd4655
Merge branch 'develop' into winrm-improv 2023-11-03 14:14:38 -04:00
Marshall Hallenbeck 9fc67da64e
Merge pull request #63 from XiaoliChan/connection-miss-port
[connection.py] Improvement
2023-11-03 14:14:25 -04:00
Marshall Hallenbeck b4bd5d6c83
Merge branch 'develop' into connection-miss-port 2023-11-03 12:31:09 -04:00
zblurx 5e247be9d5
Merge pull request #50 from Pennyw0rth/s4u
Implement s4u abuse
2023-11-03 12:16:29 +01:00
zblurx 2c1f30a276 fix ruff alerts 2023-11-01 19:47:38 +01:00
zblurx 4853942fee
Merge branch 'develop' into s4u
Signed-off-by: zblurx <68540460+zblurx@users.noreply.github.com>
2023-11-01 19:18:25 +01:00
XiaoliChan 3f91715d31 [winrm] marshall: review I
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-11-01 13:44:32 +08:00
XiaoliChan 74a33e27b0 Merge remote-tracking branch 'upstream/develop' into connection-miss-port 2023-11-01 13:10:29 +08:00
Alexander Neff 47eed50292 Autoformat and fixing some line breaks 2023-10-31 16:48:23 -04:00
Alexander Neff e20ed5c97e Fix small typo in github bug report template 2023-10-31 16:38:24 -04:00
Marshall Hallenbeck 47e062493e
Merge branch 'develop' into winrm-improv
Signed-off-by: Marshall Hallenbeck <Marshall.Hallenbeck@gmail.com>
2023-10-31 13:18:11 -04:00
Marshall Hallenbeck be540f2d87
Merge pull request #97 from shresthasurav/patch1
fix typos in python files of directory `nxc/modules`
2023-10-31 11:28:05 -04:00
Marshall Hallenbeck 6d962107b9
Merge branch 'develop' into patch1
Signed-off-by: Marshall Hallenbeck <Marshall.Hallenbeck@gmail.com>
2023-10-31 11:27:25 -04:00
Marshall Hallenbeck 6e589018c6
Merge pull request #98 from Pennyw0rth/neff-bugfixes
Fix import error on windows
2023-10-31 11:18:01 -04:00
XiaoliChan 470d861cf7 [winrm] aeskey support
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-10-31 22:26:12 +08:00
Alexander Neff 03f3155835 Fix arg hasattr delegate check 2023-10-31 10:24:15 -04:00
XiaoliChan ddb7cf2065 [connection.py] update logger
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-10-31 21:45:12 +08:00
XiaoliChan e2bc4bdd97 [winrm] platform check when doing kerberos auth
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-10-31 21:43:36 +08:00