Commit Graph

229 Commits (87ff0d071594c2112b22e5a47b117d7ef9fa3346)

Author SHA1 Message Date
Marshall Hallenbeck 1d33c58059 refactor(smbdb): change all add_user references to add_credential and refactor some if statements 2023-03-13 16:06:18 -04:00
Marshall Hallenbeck 8463829b5b feat(database): working on making database operations more async, reducing write concurrency issues, and fixing sqlalchemy query formats 2023-03-13 16:05:57 -04:00
Marshall Hallenbeck a634530128 feat(cmedb): add database column for count of members of groups from AD, and the last queried time of it. Additionally transition to sqlalchemy 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck c8b472321a feat(cmedb): update queries and fix parameter names 2023-03-13 16:05:05 -04:00
Marshall Hallenbeck 3dd7134898 chore(smb): fix formatting for smb.py 2023-03-13 16:03:50 -04:00
Marshall Hallenbeck 3c62a58008 fix(smb): update logging for shares 2023-03-13 15:58:38 -04:00
Marshall Hallenbeck 18d2b273af feat(cmedb): update cmedb.groups sql queries to use sqlalchemy 2023-03-13 15:58:38 -04:00
mpgn 9ca90fcecc is_admin check wrong 2023-02-23 04:38:44 -05:00
mpgn c0b1d71cc8
Merge branch 'master' into dpapi 2023-02-22 20:43:47 +01:00
mpgn 26e0393a31 Add check to verify if latest version of cmedb is used 2023-02-22 14:41:58 -05:00
zblurx 7bfdd0a75d store dpapi secrets in cmedb 2023-02-22 13:58:53 +01:00
zblurx 393dfc3987 store domain backup key 2023-02-22 12:56:24 +01:00
mpgn 602e7bb020 add option to dump cookie dpapi 2023-02-19 15:35:37 -05:00
mpgn f381728740 add message when dumping dpapi 2023-02-19 08:33:05 -05:00
mpgn 681e821514 fix local auth dpapi check 2023-02-19 08:06:02 -05:00
mpgn 63c49c0895 add check if da 2023-02-16 08:33:26 -05:00
mpgn 9a1e52f176 change logic for masterkey 2023-02-16 08:09:21 -05:00
mpgn 19a6c3887f merge master into pr 2023-02-16 08:04:23 -05:00
zblurx ffae9abf49 fix trycatch in dpapi 2023-02-14 11:15:14 +01:00
mpgn 3e2abb9e1e improve share filter 2023-02-13 15:53:55 -05:00
zblurx 6f198372ca merge firefox into dpapi core option 2023-02-13 11:48:12 +01:00
mpgn a551244f38 Add option to only view readable/writable shares credit to @jenaye 2023-02-12 17:19:46 -05:00
Alexandre ZANNI c05d27b8d2 [chore] better grep 2023-02-12 09:18:41 -05:00
mpgn 3b5d719d24 Simplify check 2023-02-12 08:52:22 -05:00
zblurx a0832f2190 add firefox module 2023-02-10 15:16:10 +01:00
zblurx 194499533d modify output 2023-02-09 15:34:25 +01:00
zblurx 5263a4647d modify output 2023-02-09 15:33:14 +01:00
zblurx aeb0c0ea5a fix bugs 2023-02-08 12:16:07 +01:00
zblurx 0d39dff6e9 upgrade version of dploot 2023-02-08 09:53:40 +01:00
zblurx 9aa4675032 added try catch 2023-02-08 09:14:18 +01:00
zblurx 10e3b32b62 fix kerberos auth 2023-02-07 22:22:40 +01:00
zblurx 3086559501 auto export of domain backup key 2023-02-07 15:32:19 +01:00
zblurx 33093c2d49 fix dpapi harversting 2023-02-07 14:51:01 +01:00
zblurx f790d95613 pass it to core option 2023-02-07 12:06:42 +01:00
mpgn 5696026ba0 Fix exec method with kerberos 2023-02-05 08:00:46 -05:00
mpgn 0c02ed4c0b Add GMSA print id 2023-02-05 04:44:07 -05:00
mpgn af8cfa8011 Add new gmsa function <3 2022-12-14 15:45:51 -05:00
mpgn 1051ec2e69 Fix smb nthash not display with kerberos 2022-12-12 14:39:29 -05:00
Julio Ureña 4bab776011 Fix --enabled option to dump only enabled accounts
This change allows the option to work as expected and also includes an option to grep a list of users.
2022-12-12 14:39:29 -05:00
Julio Ureña 59b953c3f7 Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-12-12 14:39:29 -05:00
Julio Ureña 42a3d9375b Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-12-12 14:39:29 -05:00
mpgn 31542973d7 Fix smb nthash not display with kerberos 2022-11-29 17:05:15 -05:00
mpgn 99cea583e9 Add kerberos compatibility for laps option 2022-11-29 16:46:25 -05:00
Julio Ureña 7c684bcffb
Fix --enabled option to dump only enabled accounts
This change allows the option to work as expected and also includes an option to grep a list of users.
2022-11-22 14:28:57 -04:00
Julio Ureña bd5a3fe91d
Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-11-16 16:15:30 -04:00
Julio Ureña baceb06afd
Add - Retrieve username when using Kerberos Auth
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-11-16 16:06:43 -04:00
mpgn 9d6c3fe67e Add kerberos compatibility for laps option 2022-11-10 16:07:41 -05:00
mpgn 25978c0be0
Update smb.py 2022-11-10 22:06:35 +01:00
mpgn 193ce4128e SMB kerberos better you can put ip whithout fqdn 2022-11-10 04:17:09 -05:00
mpgn 667faa0d7b Add catch for kerberos use-kcache option 2022-11-09 16:56:57 -05:00
Julio Ureña 47a92590a6
Remove @requires_admin flag for WMI queries
Although not common, it is possible for a user to be assigned WMI privileges. Removing @requires_admin in case we do not have privileges to make queries to WMI we will receive an access denied error, which makes it clearer what is happening.
2022-11-04 07:45:47 -04:00
mpgn b2bcbe0ade Fix issue #667 with use-kcache option 2022-11-03 16:04:46 -04:00
mpgn 49d68e0269 fix error with connection outside dc 2022-11-03 15:29:56 -04:00
Julio Ureña 3eb80ae534
Modify logging output when putting files
Added \\ to match the correct display of the file and path.
2022-11-01 08:10:55 -04:00
Julio Ureña cc72c6c868
Remove @requires_admin from get_file and put_file
The @requires_admin flag prevents non-admin users who have Read and Write access to a shared folder from performing any operations.
2022-11-01 07:29:56 -04:00
mpgn a36d3145e1
Merge pull request #655 from zblurx/master
Fix kerberos authentication and add kerbrute
2022-10-31 13:34:03 +01:00
mpgn 3942eab31b update a little bit 2022-10-31 08:33:41 -04:00
mpgn fedbfaf1f5 Change default order of exec method for smb 2022-10-27 15:40:34 -04:00
mpgn 132332a8fd add new color for asreproast account smb 2022-10-24 10:02:01 -04:00
mpgn d61d6f0339 add new color for asreproast account 2022-10-24 09:59:43 -04:00
mpgn b62bd670e0 Don't block if account not green 2022-10-24 09:11:45 -04:00
mpgn 70f8d973cf add KDC_ERR_PREAUTH_FAILED error 2022-10-24 09:01:30 -04:00
mpgn 5040ab6b40 ldap try catch + magenta 2022-10-24 08:55:48 -04:00
zblurx b9699ab078 fix output modifs on smb protocol 2022-10-24 14:55:07 +02:00
zblurx 53b612d317 adapt outputed creds 2022-10-24 14:12:32 +02:00
mpgn 0a218c534f add magenta color if user exist but connection KO 2022-10-24 05:43:52 -04:00
mpgn ef349a5309 refactor check if admin func to be comptatible with kerberos 2022-10-24 05:26:53 -04:00
mpgn 0a284bd2b0 remove message CCache file is not found + fix exec method with kerberos 2022-10-22 17:29:56 -04:00
mpgn ed2b2b261a fix for kerberoast function 2022-10-22 16:38:29 -04:00
mpgn 7e0613c883 fix username to send to bh 2022-10-20 17:18:22 -04:00
mpgn 53f5791e7c Fix a lot things but good pr 2022-10-20 15:40:53 -04:00
zblurx f4485ff279 fix kerberos authentication 2022-10-20 18:08:30 +02:00
mpgn 0fc010b0d5 Fix except error 2022-10-13 08:20:22 -04:00
mpgn 105ad97947 quick fix cmedb export share 2022-09-22 18:24:27 -04:00
mpgn 65796271c0 Merge branch 'export' 2022-09-22 18:06:37 -04:00
mpgn 018bd9608a Update cmedb for shares 2022-09-22 18:05:18 -04:00
mpgn fad860df43 Update ntds dump with option user and enabled #455 2022-09-11 12:49:28 -04:00
Wlayzz b57ba767f8 Adding shebang and encoding utf-8 for all python files 2022-07-19 01:59:14 +02:00
mpgn 94a28cd184 revert back to pywerview 0.3.3 for better compatibility 2022-07-06 09:52:53 -04:00
mpgn 75e19ae4b2
Merge pull request #545 from Serizao/master
Add smbv1 and signing into sqlite database
2022-06-18 23:50:18 +02:00
mpgn 708e76d17a
Merge pull request #572 from shoxxdj/master
🚀 add support for filter user when searching for loggedon
2022-06-18 22:47:53 +02:00
mpgn 055eb25c71
Merge pull request #570 from snovvcrash/codec
Add -codec execution option
2022-06-17 22:12:54 +02:00
Gianfranco Alongi def9d4a562
Fixed instability issues for SMB (no _Connection crash, NetBIOSTimeout crash, UnsupportedFeature-crash) (#560)
* Fixed instability issues based - the smb mode will now not crash on
 SMB object not having _Connection
 NetBIOSTimeout
 UnsupportedFeature

* Forgotten return statement

* Improved logging logic

* Improved logging
2022-06-17 22:11:28 +02:00
shoxxdj d3b88088fc 🚀 add support for filter user when searching for loggedon 2022-04-27 11:04:23 +02:00
Sam Frees1de f183b6bcc1 Add -codec execution option 2022-04-26 16:58:03 +03:00
mpgn 47e6521822 Merge branch 'master' of https://github.com/byt3bl33d3r/CrackMapExec 2022-03-06 11:07:19 -05:00
TNeitzel 4dc4fd72c2 Add STATUS_NO_SUCH_FILE to success status
When the remote server returns a STATUS_NO_SUCH_FILE message, cme
interprets the login credentials as wrong. However, impackets
smbserver.py proves that this can be wrong.
2022-03-03 21:52:37 +01:00
Serizao 998b6a4f36
Update smb.py 2022-03-02 08:04:35 +01:00
Serizao 955ff4e4d3
Update smb.py 2022-03-02 08:00:26 +01:00
mpgn e15ae44c81 Push from public repo 2022-02-27 08:08:30 -05:00
mpgn b713723269 Add laps function for WinRM 2022-02-11 16:38:39 -05:00
mpgn 8d665375a8 Improve laps core functon 2022-02-10 16:36:07 -05:00
mpgn c3dec653d4 Add check for audit mode #523 2022-02-07 16:19:46 -05:00
mpgn 47dd3cdfc2 Add audit mode #523 2022-02-06 17:56:41 -05:00
HynekPetrak fdc2aadf2b sanitize IPv6 in a file name 2022-02-06 16:44:06 -05:00
mpgn 19a5896c1e Fix issue when local account is used with bh #533 2022-02-06 07:33:49 -05:00
mpgn 766ee48328 Fix kerberos ntds dump 2022-01-19 13:13:05 -05:00
mpgn d90709bd97 Fix exception 2021-12-18 15:33:46 -05:00
mpgn 66621b9014 Merger master public to sponsor version 2021-12-17 15:45:21 -05:00
brightio 2628a427d8
Fix a number of unhandled expections in cme/protocols/smb.py 2021-12-11 14:57:37 +01:00