Commit Graph

248 Commits (68a908562a1be40ba82ce3e38bbf285a9bcb4bbc)

Author SHA1 Message Date
byt3bl33d3r 6e2d24c0b7 Fixed a bug when passing-the hash that would cause an AttributeError 2015-11-20 18:51:50 -07:00
byt3bl33d3r 11e75ac897 Added --fail-limit and --gfail-limit options to limit the amount of
failed login attemptes per host and globally
2015-11-19 23:04:54 -07:00
byt3bl33d3r 2fe0d795f0 Updated README with new usage 2015-11-19 21:15:12 -07:00
byt3bl33d3r 2212a03275 Added options to interact with Windows services 2015-11-19 21:13:46 -07:00
byt3bl33d3r a9e0ee99ec Fixed bug with atexec that would cause it to not retrieve command output
Made atexec output more consistent
2015-11-19 18:59:11 -07:00
byt3bl33d3r a7be3ea0a7 Usage update in README 2015-11-19 18:31:48 -07:00
byt3bl33d3r f1d97518ac Version bump and README update 2015-11-19 18:29:27 -07:00
byt3bl33d3r c9bb82fb45 Initial PowerView integration, for some reason only works when using
smbexec as the execution method, so for now it's forced to that
Fixed a bug where forcing Powershell code to run in a 32bit process
would cause a rpc_access_denied error message
Made Mimikatz parser output more consistent
Made wmiexec and smbexec output more consistent
2015-11-19 18:13:32 -07:00
byt3bl33d3r bff44a5ed2 Fixed WMI query output formatting 2015-11-14 21:51:59 -07:00
byt3bl33d3r 19ecdf870a Merge branch 'master' of github.com:byt3bl33d3r/CrackMapExec 2015-11-13 22:38:19 -07:00
byt3bl33d3r 433a98f4d8 Fixed namspace error when injecting an exe 2015-11-13 22:38:13 -07:00
byt3bl33d3r 4690ca29b9 fixes issue #43 2015-11-11 09:26:01 -07:00
byt3bl33d3r 9ebc95519a Merge branch 'master' of github.com:byt3bl33d3r/CrackMapExec 2015-11-10 23:26:13 -07:00
byt3bl33d3r 365675f380 Re-added the synopsys sections in the PowerShell scripts
All comments and uneeded sections get dynamically removed when the
script is requested
2015-11-10 23:25:11 -07:00
byt3bl33d3r 117906707f Update README.md 2015-11-10 22:15:28 -07:00
byt3bl33d3r 6e173670a0 Update README.md 2015-11-10 22:14:49 -07:00
byt3bl33d3r 3a7479d7dd Merge branch 'master' of github.com:byt3bl33d3r/CrackMapExec 2015-11-10 20:12:57 -07:00
byt3bl33d3r 38ca35d619 Vss NTDS.dit dumping method back online
Updated README
2015-11-10 20:06:58 -07:00
byt3bl33d3r b31ba6f10d Updated README 2015-11-10 02:24:13 -07:00
byt3bl33d3r b62d3e0e60 rougue variable messing with my flow 2015-11-10 02:16:48 -07:00
byt3bl33d3r 66dbf87af5 Everything is set! \o/
Recap on changes:
Complete refactor, script broken up to make it readable
Kerberos support (!!!! sweeeeet !!!!)
Logging has been overhauled (everything sent to stdout gets logged)
Added a noOutput attr on all three excution methods
Exposed a --no-output option for moar stealth when executing commands
Exposed a --lsa option to dump LSA secrets
Exposed the -history and -pwdLastSet options from secretdump
Fixed passpoldumper
Fixed the NTDS.dit dumper
HTTP/HTTPS server now removes powershell script comments
HTTP/HTTPS server randomizes powershell function names to bypass AV on
windows 10
--session and --luser output has been made decent (resolves #42)

Moar code style changes and bugfixes

TODO:
hook back up ninja and vss NTDS.dit dumping methods
Allow all three execution methods to utilize the smbserver as fallback
to retrieve command output
expose some options to control remote services
2015-11-10 01:57:04 -07:00
byt3bl33d3r e84c55dc8c Removed SMB as a PS script server (still can't get it working reliably
on my system)
2015-11-08 23:39:37 -07:00
byt3bl33d3r ac5210826d Added PoC Powershell obfuscation (if you can even call it that) to
bypass Windows Defender on Win 10

Everythings pretty much back to normal, just needs testing and more
code cleanup
2015-11-08 23:32:48 -07:00
byt3bl33d3r 83e2f34b4c Almost all functionality restored, removed psexec execution method 2015-11-08 20:11:18 -07:00
byt3bl33d3r e7246fd777 Refactor pass 1
Revamped logging and main greenlet
Major code cleanup and bug fixes everywhere
2015-11-08 15:27:33 -07:00
byt3bl33d3r 73a3917bc2 Added all 4 execution methods to main greenlet 2015-11-05 18:01:47 -07:00
byt3bl33d3r 894ad27693 Minor changes when handling platform checks 2015-11-04 10:03:39 -07:00
byt3bl33d3r 9d15d52df1 Possible fix for #38 2015-11-04 09:20:15 -07:00
byt3bl33d3r fcfdf3d04c Initial re-write
Overhauled logging, major code cleanup and organization
Updated all impacket script code to latest commit.
Initial Kerberos support
2015-11-03 03:22:58 -07:00
byt3bl33d3r 2256caa865 Modded the smbserver 2015-11-02 10:52:05 -07:00
byt3bl33d3r 995011f21d Fixed smbserver class for unicode 2015-11-01 19:52:05 -07:00
byt3bl33d3r a3467bf680 Fixed mimikatz log parser to not display raw mem output in password fields 2015-11-01 19:40:44 -07:00
byt3bl33d3r c58dd26833 fixes #30 2015-11-01 19:06:38 -07:00
byt3bl33d3r 56fe9aa19a Added Windows support 2015-11-01 18:52:00 -07:00
byt3bl33d3r 05fc05c178 Fixes #35 and #27
Content searching didn't work due to a bug parsing the * when listing
directory contents

Printing anything Unicode should now work everywhere

Made share spidering output more consistent/prettier
2015-11-01 17:58:50 -07:00
byt3bl33d3r 97a1b3eca2 Merge branch 'master' of github.com:byt3bl33d3r/CrackMapExec 2015-11-01 14:47:56 -07:00
byt3bl33d3r 8c230979ef Fixes #34 and #28
All strings are now unicode by default (ala Python3)
2015-11-01 14:47:31 -07:00
byt3bl33d3r c52c3993f3 Fixes #24 and #38
All strings are now unicode by default (ala Python3)
2015-11-01 14:45:42 -07:00
byt3bl33d3r b10d3efa1e Added option to use SMB server to download PS scripts (Does not work yet!)
You can now have subnets and IP ranges in a target file
2015-11-01 13:27:42 -07:00
byt3bl33d3r 56bd3908ec Revert "Possible fix for #24"
This reverts commit c74d7720df.
2015-10-30 22:51:22 -06:00
byt3bl33d3r 4a0f83fc02 Merge branch 'master' into smb_transport 2015-10-30 22:47:26 -06:00
byt3bl33d3r c341c305bc Resolves merge conflicts 2015-10-24 10:43:01 -06:00
byt3bl33d3r c74d7720df Possible fix for #24 2015-10-24 10:41:15 -06:00
byt3bl33d3r 255fff88bd fixes #23 2015-10-23 10:12:29 -06:00
byt3bl33d3r 7741bf538b Initial SMB transport support 2015-10-22 19:20:07 -06:00
byt3bl33d3r df60fbf335 Updated usage in README 2015-10-19 19:26:26 -06:00
byt3bl33d3r ccf0025c42 added options to create and delete the UseLogonCredential registry key for wdigest dumping on Windows 8.1 (#18) 2015-10-19 19:13:36 -06:00
byt3bl33d3r 9ad18f95b8 Thread number now defaults to 10 (resolves issue #12) 2015-10-19 09:00:42 -06:00
byt3bl33d3r b13a4a4a76 Revamped the print_* functions for unicode handling 2015-10-19 08:41:29 -06:00
Dan McInerney 9964d4f991 replaced ".decode('utf8')" with "unicode(x, errors='ignore')" 2015-10-18 16:36:30 -06:00