Commit Graph

878 Commits (9bcb9920f01ae5768f3674046d1e0e67ee830d56)

Author SHA1 Message Date
mpgn 53a51a02f2 Fix #464 thanks Wil 2021-09-18 22:44:48 +02:00
mpgn 7686dd7fab Fix #470 IPv6 local-adress thanks to @bert128 2021-09-18 22:44:48 +02:00
mpgn a31d03a99a Fix #486 with ntds dump thx @b13bs 2021-09-18 22:44:48 +02:00
mpgn 46a00c3fef
Merge pull request #409 from RagingCactus/file-handling-concurrency-fixes
Fix file reading concurrency issues
2021-09-17 20:33:33 +02:00
mpgn 43b8a7ddb5
Merge pull request #491 from qtc-de/master
Add webdav module
2021-09-16 17:19:11 +02:00
TNeitzel 8dc89c01a1 Fix typos
Fixed some typos
2021-09-16 07:41:55 +02:00
TNeitzel 1ca1718e14 Add webdav module
Add the webdav module that allows to enumerate whether a target has the
WebClient service running.
2021-09-16 07:31:31 +02:00
mpgn 195d18f8ad Merge private repo for winrm port option 2021-08-01 18:13:24 -04:00
mpgn dec922f3c3
Update Dockerfile 2021-08-02 00:01:27 +02:00
mpgn 8651479692
Add spooler service module
Add spooler service module to detect if the service is enabled or not using RCP call from https://raw.githubusercontent.com/SecureAuthCorp/impacket/master/examples/rpcdump.py
2021-07-05 21:11:35 +02:00
mpgn b9986a12ac
Add spooler service module
Add spooler service module to detect if the service is enabled or not using RCP call from https://raw.githubusercontent.com/SecureAuthCorp/impacket/master/examples/rpcdump.py
2021-07-05 21:02:15 +02:00
mpgn d5a005898e Improve LDAP protocol
- improve authentification status error
- check if user is on a juicy group
2021-07-02 04:50:41 -04:00
mpgn c3516fe9d5 Merge branch 'master' of https://github.com/Porchetta-Industries/CrackMapExec 2021-06-28 13:25:31 -04:00
mpgn 091915b990 Fix and add a lot, check commit message
Update LDAP proto:
	- can fetch a LDAP domain from an account from another domain (trust relation between forest)
	- fix sizeLimit to unlimited on LDAP queries
	- fix little mistake in LDAP modules

Update SMB proto:
	- fix users function when DC is vulnerable to NULL SESSION
	- add SAMRPC function to fetch users on the domain
	- add option --computers to fetch all computers

Update CLI
	- add function export, but it's not tested
2021-06-24 14:38:24 -04:00
mpgn 4385abaa24 Bump to version 5.1.7 Kali ready 2021-05-30 16:51:52 -04:00
mpgn 9104e18f7e Add port option to WinRM protocol #469 2021-05-30 16:49:12 -04:00
mpgn 215c479957 Fix spelling mistake 2021-05-30 16:28:37 -04:00
mpgn e4f5a5ffe8
Merge pull request #441 from nodauf/master from @nodauf
Add module get_description
2021-05-30 22:18:10 +02:00
mpgn 8b05967bad
Merge branch 'master' into master 2021-05-30 22:17:08 +02:00
mpgn de5837b48c
Merge pull request #458 from sokaRepo/modules-mssql from @sokaRepo
Add privilege escalation MSSQL module
2021-05-30 22:09:44 +02:00
mpgn 3b5c912e68
Merge pull request #450 from nodauf/patch-1 @nodauf
Add option --password-not-required
2021-05-30 21:19:35 +02:00
mpgn 2ec7133a8e
Merge pull request #468 from p0dalirius/master
Added MachineAccountQuota LDAP module  from @p0dalirius
2021-05-30 21:08:44 +02:00
soka f6130ee2bb Add rollback action and fix IMPERSONATE filter 2021-05-30 18:28:14 +02:00
Podalirius 708e8e65ab
Added MachineAccountQuota LDAP module
Retrieves the MachineAccountQuota domain-level attribute
2021-05-28 10:07:50 +02:00
mpgn 2983113312 Add watermark public version 2021-05-27 15:19:54 -04:00
mpgn 3ade69abed
Fix missing try catch on --shares option
Thx to @0xdf report !
2021-04-02 19:25:06 +02:00
soka 2aaba52578 Add privilege escalation MSSQL module 2021-03-26 12:45:13 +01:00
mpgn 4765da721c Update requirements 2021-03-08 15:55:02 -05:00
mpgn 27251ce19b update build collector script 2021-03-08 15:14:35 -05:00
mpgn 9c44a5ea0e update build collector script 2021-03-08 15:03:04 -05:00
mpgn 743d7e86f7 Bump to version 5.1.6 2021-03-08 14:44:58 -05:00
mpgn e4132de548 Cleanup useless data project before compile with shiv, binary size should be ~15mo => before 50mo 2021-03-08 13:53:30 -05:00
mpgn 872cbb3d5f Update lsassy to version 2.1.4 to use latest version of pypykatz 2021-03-08 13:10:23 -05:00
mpgn d2f0b66ae4 Add option --amsi-bypass allowing you to pass a custom amsi bypass when using option -X 2021-02-28 09:48:50 -05:00
mpgn 761637f247 Bye Bye thirdparty folder 👋 #361 2021-02-28 09:00:12 -05:00
mpgn 23a4e55ba8 Add LAPS module thx to @T3KX 2021-01-29 18:57:12 -05:00
mpgn 627966e227 Small code Refactoring for ldap protocol 2021-01-29 18:25:39 -05:00
mpgn b3b6ed3b05 Fix smb and http server shutdown function 2021-01-29 18:15:03 -05:00
mpgn ba91408c74 Fix smb error not correctly catched 2021-01-29 11:30:05 -05:00
mpgn 89035e06a5 Add IPv6 support #339 thanks to @bert128 2021-01-29 06:16:55 -05:00
mpgn b2a53dc896 Better null session handle 2021-01-29 05:53:40 -05:00
mpgn d53343369b Fix function name sessions option 2021-01-27 05:49:23 -05:00
nodauf 0487e55234
Add option --password-not-required
Add option --password-not-required to retrieve the user with the flag PASSWD_NOTREQD. With this flag the user is not subject to a possibly existing policy regarding the length of password. So he can have a shorter password than it is required, or it may even have no password at all, even if empty passwords are not allowed
2021-01-23 12:21:33 +01:00
mpgn 4597216d9e Bump to version 5.1.5 2021-01-21 12:57:17 -05:00
mpgn 567ed8d8c3 Add option --users and --groups to LDAP protocol 2021-01-21 09:45:55 -05:00
mpgn 2250e5ab36 Fix grammar 2021-01-21 05:29:17 -05:00
mpgn 95aad485fb Fix issue #412 2021-01-21 05:28:56 -05:00
mpgn 719f18ac78 Fix cmedb encoding error #439 2021-01-21 05:08:06 -05:00
mpgn 908d074815 Catch exception if domain controller not found --kdcHost 2021-01-21 03:54:26 -05:00
mpgn af2dc05b7e Add --continue-on-success option to ldap protocol 2021-01-21 03:47:45 -05:00