Commit Graph

Select branches

Hide Pull Requests

change_expired_pw

credguard

fix_encoding

fix_x86_branch

logonsession-info

master

newpac_default

principal_types

rubeus-3.5

s4u2self_fix

#10

#101

#104

#105

#107

#108

#109

#11

#110

#112

#113

#115

#116

#118

#12

#121

#121

#122

#125

#126

#127

#128

#129

#129

#130

#130

#131

#132

#133

#133

#134

#135

#136

#137

#137

#138

#139

#141

#143

#144

#146

#146

#147

#149

#15

#152

#153

#154

#154

#156

#157

#159

#162

#162

#163

#163

#165

#166

#167

#167

#168

#170

#172

#174

#175

#176

#177

#178

#180

#182

#183

#183

#186

#187

#187

#188

#190

#190

#191

#193

#194

#197

#198

#199

#2

#200

#201

#203

#203

#204

#204

#206

#207

#207

#208

#209

#212

#212

#214

#214

#215

#216

#217

#217

#22

#221

#221

#26

#28

#29

#3

#30

#31

#36

#37

#39

#4

#40

#46

#49

#5

#52

#54

#56

#57

#58

#59

#6

#60

#61

#62

#64

#65

#66

#69

#7

#70

#72

#73

#79

#79

#8

#80

#82

#83

#84

#85

#87

#87

#88

#89

#9

#91

#92

#94

#95

#96

1.6.4

Mono Color

• 8c807c9696 Merge pull request #122 from JoeDibley/aes-salt-samaccountname-spoof Will 2021-12-17 15:14:32 -08:00
• cfdb1c28c3 Added oldsam parameter to Asktgt JoeDibley 2021-12-17 17:45:45 +00:00
• 9f1269cf6a Merge pull request #107 from ADNinja/master Will 2021-12-15 13:13:19 -08:00
• 474f2c860e Enum for KERB_SID_AND_ATTRIBUTES Attributes ADNinja 2021-11-19 22:59:08 +01:00
• b87d0c3180 Merge pull request #118 from VbScrub/NoPreAuthOpSecFix Will 2021-12-13 11:53:04 -08:00
• 9e2541524b Merge pull request #112 from VbScrub/GetDcIpFix Will 2021-12-13 11:08:07 -08:00
• 58f98b9cdd Merge pull request #110 from VbScrub/CodeCleanUp Will 2021-12-13 11:07:53 -08:00
• a8b3606590 Merge pull request #115 from VbScrub/UnicodeUsernames Will 2021-12-13 11:07:39 -08:00
• 9f0483bdaa Merge pull request #113 from GhostPack/describe-kerberoast-fix Will 2021-12-13 10:59:54 -08:00
• 0f5cc4f9fb Merge pull request #109 from VbScrub/FileNameFix Will 2021-12-13 10:59:12 -08:00
• e0e9f59609 Merge pull request #116 from GhostPack/x-domain-kerberoast-fix Will 2021-12-13 10:55:06 -08:00
• 631479ab61 Merge pull request #95 from Dliv3/master Will 2021-12-13 10:54:16 -08:00
• bde0f52eaa Merge pull request #108 from GhostPack/lsadump Will 2021-12-13 10:53:55 -08:00
• aa4f6eadba Merge pull request #105 from GhostPack/pac Will 2021-12-13 10:52:18 -08:00
• 5a3a00bed5 Typo fix for ForgeTicket.cs HarmJ0y 2021-12-13 10:49:23 -08:00
• d65bce3893 Merge pull request #104 from l0ss/silver-fix Will 2021-12-13 10:44:26 -08:00
• ed91fbec18 Merge pull request #89 from l0ss/netonly-creds Will 2021-12-13 10:43:08 -08:00
• a2470c0e6a implementing correct PAC Attributes INFO_PAC_BUFFER based off samba patch Charlie Clark 2021-12-09 00:35:12 +00:00
• 8b2d6a0eec Fix null reference exception with "no preauth" TGTs VbScrub 2021-12-02 01:36:55 +00:00
• c88c7b03c4 fix for cross domain kerberoasting Charlie Clark 2021-12-01 13:34:03 +00:00
• 2ebb06a011 Added support for UTF8 usernames in TGTs VbScrub 2021-11-30 23:20:39 +00:00
• ae92619a02 fixed bug in 'describe' command kerberoast 'hash' dumping Charlie Clark 2021-11-26 23:30:50 +00:00
• 33a000e8f7 Renew: Use domain name to get DC VbScrub 2021-11-26 22:24:04 +00:00
• 57c2fdb0f5 AskTgt & AskTgs: Use domain name to get DC VbScrub 2021-11-26 22:23:33 +00:00
• 8aa3803768 Revert autoenterprise change in previous commit VbScrub 2021-11-25 15:14:57 +00:00
• 0a30f5abe2 Code simplification VbScrub 2021-11-25 02:36:40 +00:00
• f2fc3b1038 Allow exporting to full paths VbScrub 2021-11-23 15:56:45 +00:00
• 0ce5a165c9 removed some ambiguity in error messages and when they would show Mike Loss 2021-11-20 20:45:02 +08:00
• ed8a781f72 fixed a typo Mike Loss 2021-11-20 20:38:36 +08:00
• 52d5ac40d4 tidied up all that conditional mess, added some helpful error messages. Mike Loss 2021-11-20 20:36:15 +08:00
• 24f8c84834 combined conditionals as per review Mike Loss 2021-11-20 20:03:03 +08:00
• 56cc1be08d implemented fix suggested in issue #106 Charlie Clark 2021-11-19 22:59:15 +00:00
• cfdff00631 added support for the new info_pac_buffers and the ability to request initial TGTs without a PAC Charlie Clark 2021-11-19 03:07:35 +00:00
• c61d6af6df fixed a few things per 0xe7 review Mike Loss 2021-11-18 21:55:16 +08:00
• f73517fd62 fixes for #102 and #103 l0ss 2021-11-17 21:15:34 +08:00
• dd5472f5af Merge pull request #96 from SAERXCIT/fix-usersalt Will 2021-09-16 10:19:15 -07:00
• 82a80637e8 Fix salt for user accounts (username is case-sensitive with sAMAccountName) SAERXCIT 2021-09-15 16:47:37 +02:00
• de3e6da030 Added LDAP encryption Dliv3 2021-09-14 18:04:12 +08:00
• 6ab060c600 Merge pull request #94 from GhostPack/ldapfix Will 2021-09-03 16:40:07 -07:00
• a3a3679e77 fix for plaintext LDAP when searching a specific OU Charlie Clark 2021-08-22 03:00:29 +01:00
• 19cab761c1 Merge pull request #91 from lberezy/patch-1 Will 2021-08-12 09:42:07 -07:00
• e60d7d8677 Merge pull request #92 from GhostPack/change_expired_pw Will 2021-08-12 09:41:33 -07:00
• 3990ca582f Add support for changing passwords of expired accounts. change_expired_pw CCob 2021-08-12 10:47:42 +01:00
• 7606580c52 Update Rubeus/lib/Ask.cs Lucas BerezyandNate 2021-08-07 18:42:26 +10:00
• 8218fe0c97 [PATCH] fix base64/fingerprint certFile confusion Lucas Berezy 2021-08-05 11:21:21 +10:00
• 4a7cca31d3 added option for user-defined creds in createnetonly command l0ss 2021-08-04 22:49:20 +08:00
• 3620814cd2 Merge pull request #88 from GhostPack/release/2.0 Will 2021-08-03 10:31:13 -07:00
• 44312f0f2f Update README.md CCob 2021-08-03 18:22:55 +01:00
• 4bba138eda Merge branch 'master' of https://github.com/GhostPack/Rubeus CCob 2021-08-03 17:48:03 +01:00
• 3d85b7d1c5 changed /lastlogoff to /logofftime for golden and silver, updated CHANGELOG.md and README.md Charlie Clark 2021-08-02 22:39:42 +01:00
• a1c8652f5c small fix Charlie Clark 2021-07-30 17:21:25 +01:00
• 095ef5398d fix readme Charlie Clark 2021-07-29 10:55:34 +01:00
• 207499494f aliased brute to spray Charlie Clark 2021-07-29 10:39:30 +01:00
• 071e606003 added roasting jitter to outside of if statement, otherwise it won't fire unless an SPN fails Charlie Clark 2021-07-29 03:33:46 +01:00
• 945e1f1091 updated documentation, made some small fixes Charlie Clark 2021-07-29 03:29:38 +01:00
• aaa28176a1 adding support for large LDAP searches when using LDAPS Charlie Clark 2021-07-28 15:51:50 +01:00
• 2e5fb69b2f fixed netbios retrival when run from child domain and added /crealm to silver Charlie Clark 2021-07-22 19:57:31 +01:00
• 4ee8720c3a uncomment try/catch in LSA.cs Charlie Clark 2021-07-21 02:03:35 +01:00
• edf2eaf803 fix for /bronzebit with the s4u command Charlie Clark 2021-07-21 02:01:46 +01:00
• 57feb2828b fix for describing referral TGTs, KDCChecksum key is not the same as for the ServerChecksum key Charlie Clark 2021-07-20 01:16:11 +01:00
• f766772ce7 fixed some output text and added last minpassage and maxpassage to asktgs /printargs Charlie Clark 2021-07-20 00:30:07 +01:00
• 793ca44a5e some small changes and added /targetdomain to asktgs, makes it simpler to overwride the realm in the request for edge cases Charlie Clark 2021-07-15 00:28:26 +01:00
• 7c90da07ef fixed IPv6 communication in Networking.SendBytes and changed u2u sname to user in given /tgs Charlie Clark 2021-07-14 01:48:00 +01:00
• c24baacc0e added more to /printargs switch for asktgs Charlie Clark 2021-07-06 17:19:36 +01:00
• d13e44518b added some small fixes, resourcegroup for silver tickets and removed trying \\domain\sysvol mounting and go straight to \\dc\sysvol, need to finish the /printargs functionality Charlie Clark 2021-07-02 01:45:45 +01:00
• 3d14a56521 fixed issue #81 with brute command Charlie Clark 2021-06-22 02:02:22 +01:00
• 700ffff536 fixed normal U2U requests with asktgs, added /getcredentials switch for asktgt and done some parsing of CrenedtialInfo.Credentials to output the hash nicer Charlie Clark 2021-06-21 22:36:53 +01:00
• be2c88d9c4 an implementation of impackets getPAC.py into asktgs, plus a few other small changes Charlie Clark 2021-06-18 00:26:35 +01:00
• beacf3a948 uncomments try catch in LSA.cs Charlie Clark 2021-06-08 22:54:32 +01:00
• d798cf7cda fixed TicketChecksum support and the other AuthorizationData elements Charlie Clark 2021-06-08 22:50:24 +01:00
• e93119a371 Merge pull request #84 from eladshamir/master 1.6.4 rubeus-3.5 Will 2021-06-08 07:44:25 -07:00
• ffbf0dd466 Add option to load certificate from base64 blob Elad Shamir 2021-06-08 01:13:55 +00:00
• 4d53282bc6 fixed AuthorizationData encoding/decoding and first attempt at generating TicketChecksum Charlie Clark 2021-06-08 02:02:38 +01:00
• 0de279ce96 added /s4uproxytarget and /s4utransitiedservices to printcmd functionality Charlie Clark 2021-06-07 01:32:44 +01:00
• 2528719ad3 fixed some small bugs, added /cname, /s4uproxytarget and /s4utransitiedservices to the silver command Charlie Clark 2021-06-07 01:29:33 +01:00
• e68fd88c1e give ldaps support to asreproast, for ForgeTicket when getting the Domain GPO made it try again with the DC as the host in the path, added some extra error checking Charlie Clark 2021-06-06 22:50:17 +01:00
• ddaba7f67e added /ldaps support for the kerberoast command Charlie Clark 2021-06-05 16:54:12 +01:00
• ff6e64944a fixed PA_S4U_X509_USER with using /opsec with s4u Charlie Clark 2021-06-05 15:55:20 +01:00
• 5dfb273c9b fixed bug with /opsec, TGS_REQ.NewTGSReq needed the enc_authorization_data encoded differently, also removed checks for enctype on asktgs when opsec is used, the encryption type should be the one in the TGT provided Charlie Clark 2021-06-05 01:30:14 +01:00
• aec48f72a6 added support for resource groups and the uac PAC fields on the cli Charlie Clark 2021-06-04 23:25:41 +01:00
• b9f025e3e6 fixed some small typos and output messages Charlie Clark 2021-06-04 15:16:51 +01:00
• a85f413515 Fix for KerberosDecrypt problem where additional garbage added to the end of the buffer CCob 2021-06-04 12:19:48 +01:00
• 0099aeb831 Further checks added to make sure a complete record is received. CCob 2021-06-04 10:10:08 +01:00
• 5d08f63dac Merge branch 'master' of gitlab.com:CCob/rubeus CCob 2021-06-04 09:20:16 +01:00
• b9dfbeb56a Additional defensive programming added around the response record mark in Networking.SendBytes CCob 2021-06-04 09:19:45 +01:00
• e966906e1e added support for the PasswordCanChange and PasswordMustChange fields in the PAC by grabbing the Domain policy and extracting the Min/Max Password Age values, also added the /minpassage and /maxpassage cli arguments to set them manually Charlie Clark 2021-06-04 00:39:37 +01:00
• 84610f13e4 [changepw] Added support for resetting any user account with the /targetuser argument CCob 2021-06-03 18:24:37 +01:00
• 2380319515 Upgraded EncKrbPrivPart to support kpasswd version 0xff80 (-128) CCob 2021-06-03 17:32:24 +01:00
• 07fe3f4b91 [changepw] Fixed issue where password policy was attempted to be parsed when no policy was present CCob 2021-06-03 13:51:10 +01:00
• b26feec2ba [changepw] Password policy is now decoded when RB5_KPASSWD_SOFTERROR is returned CCob 2021-06-03 13:41:44 +01:00
• b5b08ee589 Merge branch 'master' of gitlab.com:CCob/rubeus CCob 2021-06-03 10:45:25 +01:00
• a0c182f71b Refactor changepw (Reset.cs) logic to use new record mark aware logic in Networking.SendBytes CCob 2021-06-03 10:44:57 +01:00
• f2889b36d6 added most of the cli arguments for populating the PAC and a /printcmd switch to output a command to rectreate a ticket with the same information Charlie Clark 2021-06-03 02:29:59 +01:00
• bc25916a51 Switch to using TcpClient/Stream for communicating with DC CCob 2021-06-02 17:53:40 +01:00
• faa51c3e1c Added LDAPS support and fail back to LDAP Charlie Clark 2021-06-02 04:34:25 +01:00
• 2bcf296462 added the ability to set the /starttime, /authtime, /endtime and /renewtill values along with creating multiple tickets within a date range (/endrange) and the ability to give the range an interval between created tickets (/rangeinterval) Charlie Clark 2021-06-01 02:05:53 +01:00
• 4e81102d72 automated generating netbios name from domain name when not provided and removed it being a requirement when /ldap is not passed Charlie Clark 2021-05-31 16:51:13 +01:00
• 82b3a3507d added ExtraSIDs output when generating a forged ticket Charlie Clark 2021-05-31 16:42:07 +01:00
• 12ec531dc0 changed /fromldap to /ldap and added some console output to display what is happening during the ticket forging process Charlie Clark 2021-05-31 16:25:09 +01:00
• bba9ff60ec added support for forging minimal tickets without using /fromldap, created Networking.GetDCNameFromIP incase DC IP is provided on command line, fixed PAC dates to show time in LocalTime Charlie Clark 2021-05-31 01:29:28 +01:00