Commit Graph

804 Commits (bfb40f2d4f688176e2e84ceb129b9fafcefe07b7)

Author SHA1 Message Date
byt3bl33d3r 7725a69be0 Switched from Pipenv to Poetry
- Deleted unnecessary files as Poetry handles pretty much everything
2020-09-20 07:59:10 -06:00
mpgn 79e57eaa20
Fix spider_plus module options 2020-09-20 15:09:51 +02:00
mpgn 14d12fba1e Fix wireless module not showing all cleartext password 2020-09-12 15:54:51 -04:00
mpgn e73348513d Fix initialisation when openssl not installed 2020-09-11 18:43:57 -04:00
mpgn 3a15ccbaf0
Merge pull request #414 from byt3bl33d3r/build_time
Add binary for windows using Github Action
2020-09-12 00:01:13 +02:00
mpgn fea8276480
Update build_collector.py 2020-09-11 22:56:27 +02:00
mpgn 5256060767 Add new workflow for Github Action
- makefile deleted
- cme and cmedb compiled from a py script with shiv
- add windows compatibility
- remove double dependency lsassy inside setup.py file
2020-09-11 16:35:55 -04:00
mpgn 6885d9fd30 Add local-auth flag for MSSQL proto 2020-09-06 15:38:29 -04:00
mpgn bd549d0e6f Fix false positive on ckec_if_admin func MSSQL 2020-09-06 10:09:44 -04:00
mpgn 74ddbe7545 Fix check_if_admin() function for mssql 2020-09-06 09:30:03 -04:00
mpgn e47b110603 Improve MSSQL login 2020-09-06 09:21:38 -04:00
mpgn 50b922ca55
Merge pull request #413 from scopedsecurity/fix_gpp_password_typo
Fixed GPP filename typo and print
2020-09-02 20:49:27 +02:00
dev bf5b4486fc Fixed GPP filename typo and print 2020-08-26 22:47:43 -04:00
Marius Renner cc1af64448 Fix file reading concurrency issues
Before this commit, file objects for the username, password or NTLM hash
files were all shared between target jobs for different hosts. This
could cause numerous different errors in password or hash spraying jobs
with multiple targets. Sometimes some lines in input files were skipped
for some targets, and sometimes CME even ended up in an infinite loop
due to seeking in a file that is currently also being iterated on.

There have been attempts to fix some of these errors with file.seek(0)
in some places, such as with d13042f637.
This almost works because of the BoundedSemaphore sem that effectively
keeps CME attacks single-threaded. However, there were still corner
cases with shared file object accesses not protected by the semaphore.

To fix this in a reliable way, this commit shifts the responsibility of
open()ing a file object to every job instead of globally at the start.
While this does mean that the application will open the same files a
bunch of times, it also ensures correctness in regard to concurrency.
This should also allow to relax the semaphore in the future in case no
global or username limit across all targets is required.
2020-08-16 14:01:49 +02:00
mpgn 8785f5d3f4
option --ntds doesn't require to be admin anymore check #408 2020-08-12 17:27:53 +02:00
mpgn 3cc0b00f0b Remove conditional auth for modules and options 2020-08-11 07:39:16 -04:00
mpgn 4e444b68db Update spider_plus module with readable datetime 2020-07-30 10:30:29 -04:00
mpgn ce8094045d Add more compatibility for windows exe
- decrease winrm timeout to 3 seconds so @IppSec 's videos
 tlast less time :)
 -- add ico to cme exe
 -- add option smb-server-port to make cme compatible with windows
2020-07-30 15:14:31 +02:00
mpgn 1aa2f8cc0f Fix winrm uninitialized variable and hash auth option 2020-07-28 10:16:06 -04:00
byt3bl33d3r 71faa5c075
Update README.md
Added link to official discord channel
2020-07-26 20:07:37 -03:00
byt3bl33d3r b4f377f928
Update README.md 2020-07-15 19:55:10 -03:00
byt3bl33d3r d750439a05
Delete docker.yml 2020-07-13 01:51:34 -03:00
byt3bl33d3r 240cb56804
Update docker.yml 2020-07-13 01:44:31 -03:00
mpgn 97c92ffcdd Fix os import and add the dump optional using READ_ONLY option 2020-07-05 16:58:09 -04:00
mpgn 2559849f27
Merge pull request #400 from vincd/master
Add spider_plus module
2020-07-05 21:54:14 +02:00
mpgn ccb8e67e7b
Update spider_plus module
Change default output folder to TMP
Add import to fix error in try catch since os.errno does not exist anymore in python3.7
2020-07-05 21:53:07 +02:00
byt3bl33d3r 023b7462bf
Update README.md 2020-07-04 18:19:48 -03:00
Vincent D 584c926af7 Add spider_plus module
Module to spider and dump small files from SMB servers.
2020-07-02 09:10:43 +02:00
mpgn e58930581e dockerhub with pywerview testing 2020-06-30 19:05:54 -04:00
mpgn d80c4bf39c Fix some logic error using option asreproast #398 2020-06-30 16:49:11 -04:00
mpgn e0a1c5c49d Switch to master branch of Invoke-VNC #354 2020-06-30 15:31:30 -04:00
mpgn 94074edd44 Swith github workflow binaries to python3.8 (kali default config) 2020-06-30 15:28:19 -04:00
byt3bl33d3r 0f60a45b21 Added docker workflow 2020-06-29 11:15:30 -06:00
byt3bl33d3r 19e027b090 Fixed dockerfile 2020-06-29 10:27:49 -06:00
byt3bl33d3r 193fe94c4a Added dockerfile 2020-06-29 09:54:00 -06:00
byt3bl33d3r cb32df5a65
Update README.md 2020-06-26 00:59:22 -03:00
byt3bl33d3r 259ad6cf2e
Update README.md 2020-06-26 00:30:29 -03:00
mpgn f296e74d91
Add gitbook link to readme 2020-06-26 00:33:07 +02:00
mpgn 895f16c91f
Merge pull request #395 from byt3bl33d3r/v5-dev
CrackMapExec v5.1.0dev - 3TH@n
2020-06-25 23:47:45 +02:00
mpgn 7323502421 Bump to 5.1.0dev 2020-06-25 21:25:31 -04:00
mpgn 4a0cb31724
Switch to version 5.1.0dev - codename 3TH@n 2020-06-25 23:24:12 +02:00
mpgn 2fd9ac50e4 Add ntlm hash auth with ldap protocol 2020-06-22 06:25:32 -04:00
mpgn 4120883f6d Add hash auth with winrm protocol 2020-06-22 06:25:00 -04:00
mpgn 9668f7cc22 Set Python3.7 as default on github action to avoid impacket error 2020-06-21 15:22:59 -04:00
mpgn 56f1f9dd93 Login return False only if NT_STATUS_LOGON_FAILURE 2020-06-21 15:21:07 -04:00
mpgn d13042f637 Fix missing user.seek when using file as username with several hosts
this commit maybe break something but it solve this `cme smb file -u file -p file`
2020-06-20 18:43:34 -04:00
mpgn 280d497b0d Add conditional check on the func login()
- modules, options will no longer be loaded if authentication fails
- add some try catch and fix some problem with the debug on the passpolicy class
2020-06-20 18:16:37 -04:00
mpgn 8f2ef3fdaf Add color when smb status is not ACCESS_DENIED #391 2020-06-20 13:20:27 -04:00
mpgn 648d756701 Improve os import for ldap protocol 2020-06-20 06:30:25 -04:00
mpgn c590230f97 Clean authentication fail message on winrm protocol when ntlm error 2020-06-20 06:26:32 -04:00