* Initial Implementation of DMSA Support. This includes KERB-DMSA-KEY-PACKAGE and KERB-SUPERSEDED-BY-USER structures and returning data.
* Remove a console output
* Help doc updates
* Ticket Display Updates so if previous keys are needed they can be added at a later date easily.
* Clean up, comments and support child domain fqdns
* Update versions
* Change output for DMSA Request to include DMSA User and the requesting user (Computer)
During the October 2022 update Microsoft has switched to enforcement mode for the presence of the Requestor SID and Attributes PAC as part of CVE-2021-42287, therefore default golden tickets no longer work. Switch the behavior so that this is now default which can then be excluded using /oldpac argument
-Integrated @RiccardoAncarani's PR for `/delay` and `/jitter` in `kerberoast`
-arguments can now use `/arg=value` form in addition to `/arg:value`
-few kerberoasting fixes
-Added universal '/nowrap' flag to prevent base64-blobs from being line wrapped
-Added '/consoleoutfile' to output console output to a file
-Added public 'MainString("command")' function to invoke over PSRemoting
-"brute" action to perform password bruteforcing attacks using raw AS-REQs (from @Zer1t0)
-Standardized "/user","/LUID","/service","/server" targeting to triage/klist/dump actions
-Added to the "kerberoast" action:
-"/pwdsetafter", "/pwdsetbefore", and "/resultlimit" arguments for better targeting (from @pkb1s)
-"/stats" flag to list statistics of user accounts without actually roasting them
-"/ldapfilter" argument for adding custom LDAP filters to the user search query
-"/simple" argument for output file formatting but to the console
-Added "/ldapfilter" argument to the "asreproast" actions
-Added to the "asktgt"/"asktgs"/"s4u" actions the option to save the .kirbi file to disk (from @audrummer15)
-Added a "currentluid" command to display the current logon sesion ID
-Cross-domain s4u functionality (from @0xe7)
-Overhauled LSA.cs for reusability and flexibility (thanks for the help @leechristensen !)
-"kerberoast" action updated to exclude disabled accounts by default
-"harvest" mode's "/interval" argument is now in seconds, to match "/monitor"
-"harvest/"monitor" revamped to no longer depend on 4624 events, does full extraction on each round
-Fixed some timestamp converting code in the ticket extraction section
-KERB_RETRIEVE_TKT_REQUEST fix for x32 systems (from @0xRCA)
-Fixed AES salt generation (from @monoxgas)
-Fixed accidental ticket request behavior when dumping from LsaCallAuthenticationPackage
-Fixed "renew" command invocation
-Fixed "asreproast" LDAP querying
-added "hash" command to hash password to des/rc4/aes128/aes256 forms
-fixed default Kerberoast LDAP query
-Added des/aes128 /enctype support for "asktgt"
-replaced hashing crypto code with KERB_ECRYPT HassPassword() approach a la Mimikatz
-added @elad_shamir to references in readme
-/aes and /rc4opsec commands for *kerberoast*
-*kerberoast* /tgtdeleg requests RC4 for AES enabled accounts
-EType display in *kerberoast* output
See CHANGELOG.md for complete changes
Clément Notin