Commit Graph

804 Commits (bfb40f2d4f688176e2e84ceb129b9fafcefe07b7)

Author SHA1 Message Date
mpgn fc33982fb3 Fix conflicts 2021-10-16 15:40:25 -04:00
mpgn ae244b6235
Merge pull request #494 from qtc-de/feat/add-adcs-module
Add adcs module
2021-10-16 21:38:03 +02:00
mpgn 6e1e254a60 Add protocol and port regarding the protocol and port used 2021-10-16 15:37:06 -04:00
mpgn e75b4b2e16 Update ldap protocol: function users() and groups() 2021-10-16 11:41:04 -04:00
pixis 40b385287f Update lsassy version requirement 2021-10-12 18:51:27 +02:00
Pixis 186d60a787
Update module for lsassy 3.0.0 2021-10-12 18:57:18 +02:00
TNeitzel d3d077cb7a Add user-desc module
Add the user-desc module that obtains user descriptions from Active
Directory.
2021-10-02 08:40:17 +02:00
TNeitzel 577372e233 Add ldap-signing module
Add the ldap-signing module that allows to enumerate whether an LDAP
server is enforcing signing.
2021-10-02 07:25:44 +02:00
TNeitzel 69f35d6a23 Add adcs module
Add the adcs module that enumerates PKI Enrollment Services within the
domain.
2021-10-02 07:18:39 +02:00
mpgn e040752503 add debug print for smbexec method 2021-09-26 15:24:09 -04:00
mpgn c0163a837b Merge branch 'master' of https://gitlab.porchetta.industries/mpgn/CrackMapExec 2021-09-22 03:14:21 -04:00
mpgn 0000854b82 Remove filess method 2021-09-21 11:21:40 -04:00
mpgn 2942be1188 Add timeout to smb connection to 2 sec by default, much much better 2021-09-21 11:21:16 -04:00
mpgn 3d0331f714 Update ip.py 2021-09-21 11:46:06 +00:00
mpgn 86564d868e
add procdump module 2021-09-21 13:36:08 +02:00
mpgn 2e748b4727 Update ip.py 2021-09-21 09:29:07 +00:00
mpgn f5c9bfdf10
Update FUNDING.yml 2021-09-19 16:29:10 +02:00
mpgn 8d5d7226f2
Update FUNDING.yml 2021-09-19 16:27:01 +02:00
mpgn 2f0fc12cde Bump CME to version 5.2.0 2021-09-19 10:23:26 -04:00
mpgn 1a16d8465a
Update pyproject.toml 2021-09-19 16:02:24 +02:00
mpgn aea375e707
Update cli.py 2021-09-19 16:01:59 +02:00
mpgn 86ad83f74b Merge branch 'master' of https://github.com/mpgn/cme 2021-09-18 17:04:46 -04:00
mpgn fdf6cd31db
Merge pull request #2 from mpgn/dev3
Push dev branch to master
2021-09-18 23:04:16 +02:00
mpgn fdab5c545f Update ldap protocol message 2021-09-18 17:02:01 -04:00
mpgn 3b2a7fc414 Merge branch 'master' of https://github.com/byt3bl33d3r/CrackMapExec 2021-09-18 16:54:08 -04:00
mpgn 8b60dea32c Merge branch 'master' 2021-09-18 16:52:02 -04:00
mpgn 53a51a02f2 Fix #464 thanks Wil 2021-09-18 22:44:48 +02:00
mpgn 7686dd7fab Fix #470 IPv6 local-adress thanks to @bert128 2021-09-18 22:44:48 +02:00
mpgn a31d03a99a Fix #486 with ntds dump thx @b13bs 2021-09-18 22:44:48 +02:00
mpgn 46a00c3fef
Merge pull request #409 from RagingCactus/file-handling-concurrency-fixes
Fix file reading concurrency issues
2021-09-17 20:33:33 +02:00
mpgn 43b8a7ddb5
Merge pull request #491 from qtc-de/master
Add webdav module
2021-09-16 17:19:11 +02:00
TNeitzel 8dc89c01a1 Fix typos
Fixed some typos
2021-09-16 07:41:55 +02:00
TNeitzel 1ca1718e14 Add webdav module
Add the webdav module that allows to enumerate whether a target has the
WebClient service running.
2021-09-16 07:31:31 +02:00
mpgn 195d18f8ad Merge private repo for winrm port option 2021-08-01 18:13:24 -04:00
mpgn dec922f3c3
Update Dockerfile 2021-08-02 00:01:27 +02:00
mpgn 8651479692
Add spooler service module
Add spooler service module to detect if the service is enabled or not using RCP call from https://raw.githubusercontent.com/SecureAuthCorp/impacket/master/examples/rpcdump.py
2021-07-05 21:11:35 +02:00
mpgn b9986a12ac
Add spooler service module
Add spooler service module to detect if the service is enabled or not using RCP call from https://raw.githubusercontent.com/SecureAuthCorp/impacket/master/examples/rpcdump.py
2021-07-05 21:02:15 +02:00
mpgn d5a005898e Improve LDAP protocol
- improve authentification status error
- check if user is on a juicy group
2021-07-02 04:50:41 -04:00
mpgn c3516fe9d5 Merge branch 'master' of https://github.com/Porchetta-Industries/CrackMapExec 2021-06-28 13:25:31 -04:00
mpgn 091915b990 Fix and add a lot, check commit message
Update LDAP proto:
	- can fetch a LDAP domain from an account from another domain (trust relation between forest)
	- fix sizeLimit to unlimited on LDAP queries
	- fix little mistake in LDAP modules

Update SMB proto:
	- fix users function when DC is vulnerable to NULL SESSION
	- add SAMRPC function to fetch users on the domain
	- add option --computers to fetch all computers

Update CLI
	- add function export, but it's not tested
2021-06-24 14:38:24 -04:00
mpgn 4385abaa24 Bump to version 5.1.7 Kali ready 2021-05-30 16:51:52 -04:00
mpgn 9104e18f7e Add port option to WinRM protocol #469 2021-05-30 16:49:12 -04:00
mpgn 215c479957 Fix spelling mistake 2021-05-30 16:28:37 -04:00
mpgn e4f5a5ffe8
Merge pull request #441 from nodauf/master from @nodauf
Add module get_description
2021-05-30 22:18:10 +02:00
mpgn 8b05967bad
Merge branch 'master' into master 2021-05-30 22:17:08 +02:00
mpgn de5837b48c
Merge pull request #458 from sokaRepo/modules-mssql from @sokaRepo
Add privilege escalation MSSQL module
2021-05-30 22:09:44 +02:00
mpgn 3b5c912e68
Merge pull request #450 from nodauf/patch-1 @nodauf
Add option --password-not-required
2021-05-30 21:19:35 +02:00
mpgn 2ec7133a8e
Merge pull request #468 from p0dalirius/master
Added MachineAccountQuota LDAP module  from @p0dalirius
2021-05-30 21:08:44 +02:00
soka f6130ee2bb Add rollback action and fix IMPERSONATE filter 2021-05-30 18:28:14 +02:00
Podalirius 708e8e65ab
Added MachineAccountQuota LDAP module
Retrieves the MachineAccountQuota domain-level attribute
2021-05-28 10:07:50 +02:00