Julio Ureña
01de301ce1
Create groupmembership.py
...
A module to query the groups to which a user belongs.
2023-02-12 16:13:19 -05:00
Cameron Stark
59e0e6b340
fix OUTPUT option description in spider_plus
2023-02-12 16:09:17 -05:00
Sunggwan Choi
909f44d155
Fix ldap-checker module pth auth using NT hash
2023-02-12 16:00:43 -05:00
mpgn
60a7d8bdc0
Fix issue #732
2023-02-12 15:59:52 -05:00
iLightThings
e84f589902
Update nopac.py
...
Fixed spelling
2023-02-12 09:21:08 -05:00
lefayjey
5f5884785f
Fix ccache kerberos auth using rpc
2023-02-12 09:14:08 -05:00
zblurx
a4c53cab36
update firefox module
2023-02-10 15:57:10 +01:00
zblurx
a0832f2190
add firefox module
2023-02-10 15:16:10 +01:00
zblurx
f790d95613
pass it to core option
2023-02-07 12:06:42 +01:00
zblurx
66cd0799ab
add comments and limit cert dump to clientauth cert
2023-01-23 10:12:28 +01:00
Shariq Malik
b14fe7f94f
Fixed bh_owned error on non-existing values
...
If a computer on the network has been compromised but is not listed in the Neo4j database. CME won't crash any more.
2022-12-12 14:39:29 -05:00
zblurx
6f7c99bb50
Merge branch 'Porchetta-Industries:master' into master
2022-11-25 17:25:16 +01:00
Shariq Malik
a3046f657b
Fixed bh_owned error on non-existing values
...
If a computer on the network has been compromised but is not listed in the Neo4j database. CME won't crash any more.
2022-11-25 16:58:52 +05:00
zblurx
75d01e5cb6
init dpapi module
2022-11-17 16:16:10 +01:00
Julio Ureña
a5c30851c0
Fix output always returning false
...
Based on Neo4j documentation https://neo4j.com/docs/api/python-driver/current/api.html#neo4j.Result I added some modification to the result variable.
The way it was code, `result.value()` always return 0.
2022-11-09 15:39:43 -04:00
Julio Ureña
ba690f93fd
Added the option to select architecture (64 or 32)
...
The module only allowed 32 bits, with this change it is possible to select 32 bits or 64 bits architecture.
2022-11-09 07:07:29 -04:00
Julio Ureña
ccfd9565e0
Fix #671 - handlekatz modules fail
...
handlekatz modules fail if directory /tmp/shared does not exist. I changed the directory from /tmp/shared to /tmp and the option description.
2022-11-08 11:14:00 -04:00
Julio Ureña
61757a2cd2
Fix #671 - procdump modules fail
...
procdump modules fail if directory /tmp/shared does not exist. I changed the directory from /tmp/shared to /tmp and the option description.
2022-11-08 11:13:05 -04:00
mpgn
be6b0edd42
Merge pull request #662 from Porchetta-Industries/rdp
...
Bump aardwolf to version 0.2.0
2022-11-08 09:31:58 +01:00
mpgn
60e3dda195
Merge pull request #601 from Dfte/master
...
Add the Impersonate module
2022-11-07 12:26:37 +01:00
mpgn
12ec7f2278
update impersonate binary
2022-11-02 07:23:07 -04:00
Defte
5d4f3b5606
Update impersonate.py
...
I'll add technical links to the blog post explaining token manipulation internals as well as the source code of the original binary when the blog post will be released (should be on monday)
2022-10-29 11:55:34 +02:00
Defte
1bfb3a860b
Addind the IMP_EXE option
...
Guess this will be the final one :P
2022-10-29 11:52:48 +02:00
mpgn
9c66f29474
Merge branch 'master' into rdp
2022-10-28 15:22:28 +02:00
mpgn
aa8bf6aa46
Refactor options
2022-10-27 15:32:55 -04:00
Defte
2dcd33ee17
Update impersonate.py
...
Adding double quotes for spaced cmd
2022-10-27 18:57:00 +02:00
Defte
ed80922b0e
Final update!
2022-10-27 12:21:46 +02:00
mpgn
65724d4553
Merge pull request #653 from Z4kSec/master
...
Add Masky module
2022-10-25 13:03:29 +02:00
mpgn
e2130c658c
Bump aardwolf to 0.2.0
2022-10-24 15:02:42 -04:00
LuemmelSec
704471b366
Update teams_localdb.py
...
Multi user support added.
Otherwise the file at /tmp/teams_cookies2.txt gets mangled up and you don't get back any results as sqlite3 can access it but won't find any content.
2022-10-20 11:51:53 +02:00
Zak
d55f7513d2
Merge remote-tracking branch 'upstream/master'
2022-10-18 22:29:04 +02:00
Zak
2806c81d73
Add masky module
2022-10-18 22:19:35 +02:00
mpgn
74bbeee05a
Merge pull request #647 from R-Secure/master
...
Added functionality to retrieve ssoauthookie from Microsoft Teams local db
2022-10-18 20:42:53 +02:00
mpgn
7b9ce02f46
update module teams
2022-10-16 09:15:00 -04:00
mpgn
ff758fd6dd
Merge pull request #646 from bogey3/install_elevated
...
Module to check for AlwaysInstallElevated
2022-10-13 14:57:18 +02:00
mpgn
d162d7b55c
Merge pull request #640 from Tw1sm/ntlmv1-module
...
Module to check for NTLMv1 Compatibility
2022-10-13 14:57:09 +02:00
mpgn
dad84132e2
Merge pull request #637 from d3lb3/keepass_trigger
...
Add KeePass trigger abuse module
2022-10-13 14:56:39 +02:00
mpgn
d3162ee45a
Merge pull request #636 from d3lb3/master
...
Add KeePass discovery module
2022-10-13 14:56:29 +02:00
mpgn
1e5db5da61
Merge pull request #610 from BlWasp/dacledit
...
Add the new daclread.py LDAP module and the msada_guids.py library
2022-10-13 14:56:18 +02:00
mpgn
247de78541
Merge pull request #597 from guervild/mssql-upload-download
...
Mssql upload / download
2022-10-13 14:55:20 +02:00
mpgn
4f595fbbc7
Restart keepass to load cleaned config
2022-10-13 08:41:58 -04:00
R-Secure
bbd606c067
Added functionality to retrieve the Microsoft Teams Cookies database and extract the ssoauthcookie
2022-10-11 06:44:22 -04:00
mpgn
ea63b29000
update nanodump module for mssql
2022-10-10 16:22:09 -04:00
BlWasp
acf1789f2f
Add warning messages about non recursivity.
2022-10-10 14:25:55 +00:00
mpgn
927a82a554
parse keepass config file and extract password
2022-10-10 08:36:27 -04:00
mpgn
777a422888
add error with config setting not found
2022-10-10 05:57:26 -04:00
mpgn
521b55daee
Update message for polling
2022-10-10 05:36:52 -04:00
mpgn
365abf8fb0
Update keepass module to set opsec safe to false
2022-10-10 05:32:47 -04:00
mpgn
4ba1085128
update import csv
2022-10-10 05:14:16 -04:00
bogey3
1629029d35
Update install_elevated.py
...
Updated to display enabled when only the entry in HKLM is enabled as low privilege users can modify the HKCU and grant themselves permission.
Note that once the per-machine policy for AlwaysInstallElevated is enabled, any user can set their per-user setting.
https://learn.microsoft.com/en-us/windows/win32/msi/alwaysinstallelevated
2022-10-07 16:25:56 -04:00
bogey3
8d92e34d66
Created install_elevated.py
...
This module will check if the computer and the supplied user have AlwaysInstallElevated enabled.
2022-10-07 15:55:58 -04:00
mpgn
fc57723678
Merge pull request #642 from nurfed1/master
...
LDAP protocol improvements and scan-network module bugfix
2022-10-05 17:34:56 +02:00
JulienBedel
4aeb311e22
Fix PowerShell parsing after file search
2022-10-02 18:32:01 +02:00
mpgn
65796271c0
Merge branch 'export'
2022-09-22 18:06:37 -04:00
mpgn
4c5844890c
Improve module scan network
2022-09-22 18:05:39 -04:00
nurfed1
b0731f6f2c
Merge branch 'master' into master
2022-09-19 09:06:23 +02:00
Bryan De Houwer
f391b8a2a6
Bug fix: ensure DN is lowercase
2022-09-18 20:49:03 +02:00
Tw1sm
15638400ea
include compatibilitylevel 2
2022-09-16 09:30:56 -05:00
Tw1sm
196d91c6bd
added ntlmv1 check module
2022-09-15 17:51:54 -05:00
mpgn
73b945341f
Merge pull request #613 from spyr0-sec/master
...
whoami LDAP module
2022-09-09 20:41:34 +02:00
mpgn
91be977ebb
update module ldap whoami
2022-09-08 15:04:04 -04:00
mpgn
080d9e1d97
Merge pull request #608 from wlayzz/shebang_and_encoding
...
Adding shebang and encoding utf-8 for all python files
2022-09-07 21:05:56 +02:00
mpgn
1bc2cd2dad
Add module scan-subnet
2022-09-07 10:51:56 -04:00
JulienBedel
be5883a6a1
Fix typo in log messages
2022-09-04 15:13:43 +02:00
JulienBedel
904e0e7f29
Add keepass_trigger module
2022-09-04 14:29:41 +02:00
Julien Bedel
6d762f1766
Fix typo
2022-09-03 23:14:47 +02:00
JulienBedel
8248e6007d
Add keepass_discover module
2022-09-03 19:39:34 +02:00
spyr0
8acbc3bba2
Never logged on handling
2022-08-11 12:10:19 +01:00
spyr0
653a710759
Added ServicePrincipalNames
2022-08-11 11:12:31 +01:00
spyr0
293e9a9164
Added SamAccountName option, more attributes and error handling
2022-08-11 10:54:05 +01:00
spyr0
d520ecc7a5
Fixed description output
2022-08-08 17:18:45 +01:00
spyr0
b9e3e2ea40
whoami LDAP module
2022-08-08 16:47:57 +01:00
BlWasp
175b5b29d0
Add the new daclread.py module and the msada_guids.py library
2022-07-30 12:35:55 +00:00
snovvcrash
a9e56a063e
Fix subnets module
2022-07-22 18:48:51 +03:00
mpgn
3524b4e5bb
Update gpp password module
2022-07-21 14:43:30 +02:00
mpgn
177dceded8
Fix infinit loop for module hash_spider
2022-07-19 06:45:38 -04:00
Wlayzz
b57ba767f8
Adding shebang and encoding utf-8 for all python files
2022-07-19 01:59:14 +02:00
mpgn
fad09bd6b0
Update spider hash module to work with local auth and add reset option
2022-07-18 17:18:40 -04:00
pgormanDS
6f24cb2023
Update hash_spider.py
2022-07-16 09:20:51 -05:00
pgormanDS
cb98872bfa
Merge branch 'Porchetta-Industries:master' into master
2022-07-16 09:20:25 -05:00
Defte
b08f9ac64d
Update impersonate.py
2022-07-09 18:34:35 +02:00
mpgn
dbc45def20
Update code
2022-07-08 07:58:14 -04:00
LuemmelSec
b571158953
Create ldap-checker.py
...
Added a module to check for LDAP signing and channel binding settings.
2022-07-08 01:46:11 +02:00
pixis
e8947d60d4
lsassy v3.1.3
2022-07-06 10:11:23 +02:00
Defte
01ad4e24a3
Add files via upload
2022-07-04 13:44:35 +01:00
choi
9e1cabada5
add shadowcoerce module
2022-06-29 19:11:46 -04:00
guervild
34b0683b94
Add nanodump to support MSSQL
2022-06-29 13:44:56 +02:00
choi
1f2cfefc9a
add dfscoerce module
2022-06-29 02:09:52 -04:00
Dimitri Lesy
e7dda670d0
Remove duplicate logic
2022-06-24 01:28:59 +02:00
Dimitri Lesy
82d5c9b500
Ensure correct domain name
2022-06-24 01:24:36 +02:00
Dimitri Lesy
a6761bfa50
Add nanodump results to cmedb
2022-06-24 01:04:39 +02:00
mpgn
52bc18c548
Cleanup cme
2022-06-20 07:53:30 -04:00
mpgn
8a6b82a410
Merge branch 'master' into master
2022-06-18 23:14:24 +02:00
mpgn
3a6451a4c5
Recompile the binaries x64 and x86
2022-06-18 17:05:26 -04:00
Dimitri Lesy
649917ee6b
Write hostname, architecture and domain in the file name
2022-06-18 02:56:55 +02:00
Dimitri Lesy
e8fee88ac7
Determine architecture using os_arch
2022-06-18 00:05:27 +02:00
Dimitri Lesy
942a9a7a7f
Determine architecture using os_arch
2022-06-17 23:50:21 +02:00
mpgn
75abd6148c
Merge pull request #552 from fang0654/master
...
Added module for finding other network addresses on a host via WMI
2022-06-17 22:10:10 +02:00
Dimitri Lesy
350ee7f2b5
Support Unicode
2022-06-17 19:19:38 +02:00
Dimitri Lesy
e5d1d0c154
Support Unicode
2022-06-17 19:15:24 +02:00