Commit Graph

288 Commits (b9f0b259380aa9eb4c01b28f25f04763f4cca8fc)

Author SHA1 Message Date
famos0 b9f0b25938 update ntdsutil db interactions 2023-03-23 23:51:49 -04:00
famos0 f9f87b1cc4 finish ntdsutil.py module 2023-03-23 23:51:49 -04:00
famos0 7840d0050e add random outputdir 2023-03-23 23:51:49 -04:00
famos0 13ae941d34 add ntdsutil module 2023-03-23 23:51:49 -04:00
Marshall Hallenbeck ddb5d54c95 update nopac module to catch error connecting to Kerberos and fix formatting 2023-03-23 23:21:43 -04:00
Marshall Hallenbeck 89cd804e10 update install_elevated module to catch login cleanup and fix formatting 2023-03-23 23:21:16 -04:00
Marshall Hallenbeck 119677364c fix(zerologon): remove old debug logging format that isnt supported in newer Python versions 2023-03-17 20:19:24 -04:00
famos0 3e4ce963ee fix dfscoerce 2023-03-17 12:03:41 +01:00
Marshall Hallenbeck 63c1e03a1d fix(kerberos): add back in kerberos for Petitpotam and samrfunc 2023-03-16 08:34:07 -04:00
Marshall Hallenbeck d9b2975db1 fix(procdump): handle errors for procdump better 2023-03-13 16:12:44 -04:00
Marshall Hallenbeck 0c3401e9e1 fix(nanodump): handle errors for nanodump better 2023-03-13 16:12:44 -04:00
Marshall Hallenbeck 00d45c1514 fix(handlekatz): handle errors for handlekatz better 2023-03-13 16:12:44 -04:00
Marshall Hallenbeck 4891750af7 refactor: standardize nomenclature to uses 'hosts' instead of 'computers' 2023-03-13 16:12:30 -04:00
Marshall Hallenbeck fba8559049 fix: change back variable names for nthash and lmhash 2023-03-13 16:10:28 -04:00
Marshall Hallenbeck 04ce05892d fix(zerologon): catch error and alert user if epm.hept_map fails due to host not being DC 2023-03-13 16:10:07 -04:00
Marshall Hallenbeck 160efc6980 update formatting, some variable names, and other Pythonic things for winrm 2023-03-13 16:10:05 -04:00
Marshall Hallenbeck e6022139aa fix: try/except updating the database on spoolers and zerologon modules 2023-03-13 16:08:18 -04:00
Marshall Hallenbeck cbd312eb21 feat(petitpotam): update petitpotam module to update database if host is vulnerable. Also removed redundant function and cleaned up formatting 2023-03-13 16:08:16 -04:00
Marshall Hallenbeck 673afbafb5 feat(zerologon): update zerologon module to update database if host is vulnerable 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck f6bd41f94f feat(spooler): update spooler module to update database if spooler service is enabled 2023-03-13 16:07:07 -04:00
Marshall Hallenbeck 388f520103 WIP - cmedb update 2023-03-13 15:58:38 -04:00
mpgn 510b425910
Merge pull request #11 from zblurx/ldap-signing
update ldap-checker
2023-02-28 17:04:58 +01:00
mpgn b03e87b96e update av json 2023-02-28 10:46:13 -05:00
zblurx 407ce0f796 update ldap-checker 2023-02-28 16:37:11 +01:00
mpgn c294f87725 Improve output 2023-02-21 16:57:14 -05:00
mpgn 44e5020123 Add enum_av from @tothi 2023-02-21 16:28:53 -05:00
mpgn 19a6c3887f merge master into pr 2023-02-16 08:04:23 -05:00
zblurx 057bd8e889 change wireless module 2023-02-14 11:12:39 +01:00
zblurx 56e07ae0f5 add rdcman module 2023-02-14 11:12:22 +01:00
zblurx 619d21bf6c fix firefox upgrade_conn 2023-02-14 11:12:12 +01:00
mpgn 8e9bbf14fb
Merge branch 'master' into master 2023-02-14 09:52:07 +01:00
Zak a185b7c860 Update masky module (v0.2.0) 2023-02-14 03:43:20 -05:00
Zak ada917cc02 Update masky module (v0.2.0) 2023-02-13 23:20:17 +01:00
Daahtk 324996c2e1 Update msol.py 2023-02-13 15:55:02 -05:00
Daahtk 02fd427e34 Update msol.py 2023-02-13 15:55:02 -05:00
Daahtk a2a844c3cb Update msol.py 2023-02-13 15:55:02 -05:00
Daahtk 34b88f80af Add the MSOL module to dump msol cleartext password
This module will dump the cleartext password for the user MSOL_XXXX on the Azure AD Connect server. This user has DCSync rights.
2023-02-13 15:55:02 -05:00
mpgn 7b64626c47 Add two module winscp and veeam dump 2023-02-13 08:32:43 -05:00
Alexander Neff dfb0eee317 Fix bugs and error handling 2023-02-13 08:32:40 -05:00
Alexander Neff 24a2ae4955 Added module to dump credentials from veeam sql db 2023-02-13 08:32:40 -05:00
Alexander Neff d782fec1ff Clean up code and add more logging 2023-02-13 08:32:34 -05:00
Alexander Neff 98620ecdf9 Clean up Code 2023-02-13 08:32:34 -05:00
Alexander Neff cb3f44efd1 Added ability to scan for winscp.ini files 2023-02-13 08:32:34 -05:00
Alexander Neff 1456307e11 Add check if MasterPassword is set for Winscp to skip the encryption 2023-02-13 08:32:34 -05:00
Alexander Neff 9685a8f1c6 Now extract all winscp credentials from registry by loading ntuser.dat dynamically from every user 2023-02-13 08:32:34 -05:00
Alexander Neff 840a2f6628 Extract all winscp credentials from all logged in users from registry 2023-02-13 08:32:34 -05:00
Alexander Neff ca988744f0 Add winscp registry extraction 2023-02-13 08:32:34 -05:00
Alex 02f43dc287 baseline for winscp_dump module 2023-02-13 08:32:34 -05:00
zblurx 6f198372ca merge firefox into dpapi core option 2023-02-13 11:48:12 +01:00
lefayjey 877ebc28d5 Fix conf base for child domains 2023-02-12 16:19:35 -05:00