Commit Graph

Select branches

Hide Pull Requests

change_expired_pw

credguard

fix_encoding

fix_x86_branch

logonsession-info

master

newpac_default

principal_types

rubeus-3.5

s4u2self_fix

#10

#101

#104

#105

#107

#108

#109

#11

#110

#112

#113

#115

#116

#118

#12

#121

#121

#122

#125

#126

#127

#128

#129

#129

#130

#130

#131

#132

#133

#133

#134

#135

#136

#137

#137

#138

#139

#141

#143

#144

#146

#146

#147

#149

#15

#152

#153

#154

#154

#156

#157

#159

#162

#162

#163

#163

#165

#166

#167

#167

#168

#170

#172

#174

#175

#176

#177

#178

#180

#182

#183

#183

#186

#187

#187

#188

#190

#190

#191

#193

#194

#197

#198

#199

#2

#200

#201

#203

#203

#204

#204

#206

#207

#207

#208

#209

#212

#212

#214

#214

#215

#216

#217

#217

#22

#221

#221

#26

#28

#29

#3

#30

#31

#36

#37

#39

#4

#40

#46

#49

#5

#52

#54

#56

#57

#58

#59

#6

#60

#61

#62

#64

#65

#66

#69

#7

#70

#72

#73

#79

#79

#8

#80

#82

#83

#84

#85

#87

#87

#88

#89

#9

#91

#92

#94

#95

#96

1.6.4

Mono Color

• b43e094ce2 Fix issue on x86 due UNICODE_STRING being passed by value incorrectly fix_x86_branch CCob 2026-05-21 12:06:40 +01:00
• 15833880f0 Merge branch 'master' of https://github.com/GhostPack/Rubeus CCob 2026-05-21 11:59:39 +01:00
• 74215f68ea Merge pull request #215 from LuemmelSec/master master 0xe7 2025-11-14 08:08:01 +00:00
• 1ece993b58 Change target framework version to v4.0 LuemmelSec 2025-11-13 08:06:35 +01:00
• aef5d06e9f Fixed issue with wrongly derived Salt for protected users LuemmelSec 2025-11-10 12:39:37 +01:00
• 3e1cc05a0f Merge branch 'master' of https://github.com/GhostPack/Rubeus Ceri Coburn 2025-09-08 12:58:43 +01:00
• e35a5e3a2c Update Helpers.cs (#208) lyntux 2025-09-08 05:55:05 -06:00
• d7a2506d47 Merge pull request #200 from cnotin/patch-1 Will Schroeder 2025-07-23 14:15:51 -07:00
• f5a37e4563 PKINIT Authentication Minor Improvements (#198) JoeandJoe Dibley 2025-04-17 11:11:56 +01:00
• 41c9c4829e Merge branch 'master' of https://github.com/GhostPack/Rubeus Ceri Coburn 2025-04-04 16:11:00 +01:00
• 146edb070e Fixed issue where s4u2self was broken by the credential guard feature. (#201) Ceri Coburn 2025-04-04 16:10:38 +01:00
• ee16f304f6 Fixed issue where s4u2self was broken by the credential guard feature. s4u2self_fix Ceri Coburn 2025-04-04 16:07:36 +01:00
• d139d630c9 Fix minor typo "requset" Clément Notin 2025-04-03 02:13:37 +02:00
• 48a0a7b418 Fix minor typo "requset" Clément Notin 2025-04-03 02:12:32 +02:00
• 7401a2378f Merge pull request #199 from GhostPack/credguard 0xe7 2025-04-01 11:47:31 +01:00
• 73bbae3704 Further checks added for internal Rubeus version of asktgs vs LSA method credguard Ceri Coburn 2025-03-28 17:02:41 +00:00
• 5ca374f62a Add support for requesting services tickets via LSA. This is helpful on machines where credential guard is present Ceri Coburn 2025-02-25 09:30:10 +00:00
• afa32afc96 Support Delegated Managed Service Account Kerberos Processes (#194) Joe 2025-02-01 12:32:55 +00:00
• 6ce95440c7 (For review)Clearer messaging when working with Credential Guard blobs (#193) Steve Embling 2024-09-12 08:13:42 +01:00
• 351cb3bc04 Merge pull request #191 from SAERXCIT/fix-netbiosaddr-padding Ceri Coburn 2024-06-13 08:23:03 +01:00
• b25c2e50b9 Netbios addresses are 16 bytes long instead of 8. cf RFC4120 7.1 SAERXCIT 2024-06-12 17:25:32 +02:00
• b98d898217 Merge pull request #188 from theogobinet/master Will 2024-05-15 09:35:44 -07:00
• e5072968c1 Fixing GetLSAHandle as SYSTEM Théo Gobinet 2024-05-15 11:00:23 +02:00
• 04f81a41a5 Merge pull request #182 from GhostPack/fix_encoding 0xe7 2024-02-01 22:19:50 +00:00
• 129c49dc4c up version fix_encoding Lee Christensen 2024-02-01 14:16:30 -08:00
• 0e1e63ebd8 check for console before setting encoding Lee Christensen 2024-02-01 13:53:31 -08:00
• b303d1c9d8 Removed call to LsaRegisterLogonProcess Will 2024-01-17 10:42:48 -08:00
• baf34c7dcf Merge pull request #180 from GhostPack/unicode-domain Ceri Coburn 2024-01-08 10:23:58 +00:00
• c06bfca781 missed some ToLower calls to change to ToLowerInvariant for unicode chars 0xe7 2024-01-05 16:48:48 +00:00
• 63a0604df2 upped minor version 0xe7 2024-01-05 14:53:15 +00:00
• c5e53c7079 fix for unicode domains and s4u /opsec dates 0xe7 2024-01-05 14:48:42 +00:00
• 0e57072d27 Merge pull request #177 from GhostPack/fix-domain 0xe7 2023-11-28 17:39:15 +00:00
• 558c4ef75a fix unicode domain encoding 0xe7 2023-11-28 17:38:38 +00:00
• 1353dff181 Merge pull request #176 from GhostPack/fix-opsec 0xe7 2023-11-28 17:00:12 +00:00
• 2da1d303a6 added fix for TGS-REQ checksum and S4UUserID domain encoding 0xe7 2023-11-28 16:58:17 +00:00
• 51e2dc19ce Merge pull request #172 from GhostPack/HarmJ0y-patch-1 Will 2023-11-03 14:48:34 -07:00
• f5d1dca687 Update KrbCredInfo.cs Will 2023-11-03 14:48:21 -07:00
• 5db3150243 Merge pull request #170 from GhostPack/newpac-silver 0xe7 2023-09-22 23:20:02 +01:00
• 945ffabd7d added newpac to silver command 0xe7 2023-09-22 23:19:14 +01:00
• 3596d62366 Merge pull request #168 from koztkozt/koztkozt-patch-2 0xe7 2023-09-11 11:45:36 +01:00
• 0dc51e1057 Merge pull request #166 from GhostPack/des 0xe7 2023-09-11 11:43:06 +01:00
• 4a2fc8a3d9 Merge branch 'master' into des 0xe7 2023-09-01 12:06:38 +01:00
• f4c2b6e639 Update S4U.cs ztko 2023-08-15 10:14:53 +08:00
• 679e992947 adding modifications to support DES attacks 0xe7 2023-08-08 23:29:31 +01:00
• 92413123b3 Merge pull request #165 from GhostPack/principal_types 0xe7 2023-08-08 13:51:42 +01:00
• 64114442ef Added support for requesting a TGT with a specific principal name type principal_types Ceri Coburn 2023-08-08 13:37:14 +01:00
• 659d98d858 Merge pull request #159 from GhostPack/dev 0xe7 2023-05-17 12:28:10 +01:00
• 6e3736c3b4 remove unneeded assembly includes to asrep2kirbi 0xe7 2023-05-17 12:26:36 +01:00
• 9489a0c5a0 Merge pull request #156 from MWR-CyberSec/add-asreproast-aes-support 0xe7 2023-05-16 16:44:56 +01:00
• 7293b2b3b5 Merge pull request #157 from eladshamir/asrep2kirbi 0xe7 2023-05-16 16:41:49 +01:00
• 473933979d Added support for AS-REP Roasting with AES etypes Christo Erasmus 2023-05-15 14:38:50 +02:00
• bec0e35ed3 Merge pull request #153 from GhostPack/tgssub-change 0xe7 2023-04-20 21:20:45 +01:00
• 3cea8317bd small modify to tgssub 0xe7 2023-04-20 21:00:01 +01:00
• 8452430aab Merge pull request #152 from michael-dev/feature/changepw-from-certificate 0xe7 2023-04-20 20:45:21 +01:00
• c13534a1a1 Currently asktgt ignores /changepw when /certificate is used. Fix this by adding support for /changepw with /certificates. Can be used to change the ad user password of a user using smartcard / certificate authentication. Tested with Windows 10 + Windows Server 2019. michael-dev 2023-04-19 08:47:56 +02:00
• 9cf6c8d683 Add an asrep2kirbi action Elad Shamir 2023-04-18 20:09:58 +00:00
• f6685f4b71 Merge pull request #147 from JoeDibley/Key-List-Attack 0xe7 2023-02-03 15:25:12 +00:00
• 51f1863f5d Bump version number 0xe7 2023-02-03 15:20:42 +00:00
• 6b62732efa Update Help for KeyList Requests JoeDibley 2023-02-01 11:37:29 +00:00
• 1f34e3fcf7 Merge pull request #149 from GhostPack/rodc-ticket-fix Will 2023-01-27 23:58:25 -08:00
• c286cc953c fix for parsing RODC EncryptedData kvno and display RODC number using describe 0xe7 2023-01-28 00:11:46 +00:00
• f2a89781f2 Update Rubeus.csproj JoeDibley 2022-12-12 16:35:49 +00:00
• b0d9aa3487 Fix ticket display problems JoeDibley 2022-12-12 16:35:39 +00:00
• 4f06820277 Implementing KeyList attack JoeDibley 2022-12-12 16:20:14 +00:00
• b2eb95b7c1 Merge pull request #144 from GhostPack/full_pac_sig Will 2022-11-18 17:54:25 -08:00
• 39a3b88d92 several changes but mainly to add support for the new FullPacChecksum signature 0xe7 2022-11-19 01:08:30 +00:00
• 7e00eb1996 Merge pull request #143 from GhostPack/newpac_default 0xe7 2022-11-08 11:12:05 +00:00
• 52faf3b4e6 Embed Requestor SID and Attributes PAC by default newpac_default CCob 2022-11-08 09:23:17 +00:00
• f498e1c310 Merge pull request #141 from GhostPack/bugfixes Ceri Coburn 2022-10-13 13:23:19 +01:00
• cd33efcaee bugfixes in error codes and describe 0xe7 2022-10-11 22:40:41 +01:00
• 14bcb704cc Merge pull request #139 from GhostPack/asreq CCob 2022-10-05 15:30:41 +01:00
• c777771e55 added preauthscan command, various arguments to asktgt/kerberoast without preauth from the AS 0xe7 2022-09-27 10:53:33 +01:00
• 95bb611d03 Merge pull request #138 from 4ndr3w6/master 0xe7 2022-08-09 22:17:31 +01:00
• 82cca04a27 Version bump to 2.1.2 4ndr3w6 2022-08-09 16:15:05 -05:00
• 9c44f68ec7 Update to catch tgtdeleg error 4ndr3w6 2022-08-08 18:19:41 -05:00
• 41c95e7385 Merge pull request #136 from 4ndr3w6/master Will 2022-07-06 09:07:26 -07:00
• e2b77dcab1 Merge branch 'master' into master 0xe7 2022-07-05 23:44:01 +01:00
• b4718685e7 upload of initial 'diamond' command 4ndr3w6S 2022-07-05 01:23:34 +00:00
• a5eaad0f4b Merge pull request #135 from GhostPack/logonsession-info 0xe7 2022-06-29 00:26:28 +01:00
• 9544b7d7b8 Added /luid:X target to "logonsession" command logonsession-info HarmJ0y 2022-06-15 06:50:03 -07:00
• 8c6b0017af Renamed command HarmJ0y 2022-06-15 06:08:36 -07:00
• f7f4c6bb92 Added "currentlogonsession" command HarmJ0y 2022-06-15 02:18:47 -07:00
• a818fd000d Merge pull request #132 from GhostPack/upndns Will 2022-06-02 10:06:52 -07:00
• f0ab0d7310 reversed the PAC signature calculation logic until we can properly fix the marshaling issue 0xe7 2022-05-15 23:21:17 +01:00
• baa9d154c8 updated UpnDns PAC info buffer and added code to decode PAC when calculating signatures 0xe7 2022-05-13 03:01:59 +01:00
• fd0d7513b8 Merge pull request #131 from GhostPack/debug-option Will 2022-05-12 11:26:52 -07:00
• d2b57273ef Added /debug option HarmJ0y 2022-05-11 14:57:03 -07:00
• f299595130 Merge pull request #128 from matterpreter/master Will 2022-04-29 11:18:17 -07:00
• 7e1acd470e Merge pull request #126 from tyranid/master Will 2022-04-29 11:16:50 -07:00
• d3eea5d2d0 Merge branch 'master' into master 0xe7 2022-03-08 11:32:40 +00:00
• de16845f50 Updating discrepancy in the comments Matt Hand 2022-02-17 16:39:41 -05:00
• 493b8c72c3 Merge pull request #127 from GhostPack/kerb-error-fix Will 2022-02-09 10:09:42 -08:00
• b3e3d77242 fix for handling KERB_ERROR's which was broke by the last PR when d_data is not PA_DATA Charlie Clark 2022-02-09 14:06:12 +00:00
• 89f1d1a2b6 Merge pull request #125 from GhostPack/kkdcp Will 2022-02-08 12:15:54 -08:00
• bec1e18ae1 Pass command line as a command line and also use the current directory. James Forshaw 2022-02-07 23:20:21 -08:00
• 36ef496889 Added createnetonly parameter to S4U. James Forshaw 2022-01-29 00:06:35 -08:00
• 833e630778 Add a /ticket option to createnetonly to import a ticket into the new process without requiring privileges. James Forshaw 2022-01-28 23:38:19 -08:00
• 555ffbcefb added further parsing of error messages, including e-text and e-data, along with the PA-DATA ETYPE-INFO2 section Charlie Clark 2022-01-29 02:06:53 +00:00
• b2cead1686 removed extraneous DC console output for asktgs Charlie Clark 2022-01-28 00:10:35 +00:00
• 899743997a added support for KDC proxies to asktgt, asktgs and s4u Charlie Clark 2022-01-27 23:40:33 +00:00