admin/GhostPack-SharpDPAPI
1
0
Fork 0
mirror of https://github.com/GhostPack/SharpDPAPI synced 2026-06-08 11:11:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
80 Commits 4 Branches 1 Tag
localstatefile
Commit Graph
80 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Lee Christensen cda059a01c update docs 2023-11-07 10:17:08 -08:00
Lee Christensen 4844a0fd79 added slack support to statekeys/cookies commands 2023-11-07 10:10:34 -08:00
Lee Christensen d241fef22d update docs 2023-11-07 10:02:28 -08:00
Lee Christensen 70ee50ce83 add ability to specify local state file 2023-11-06 17:17:08 -08:00
Will 02992ff2c5 Merge pull request #25 from djhohnstein/master 
SameSite, Secure, HttpOnly, and EditThisCookie Format
 2023-04-21 11:58:40 -07:00
Will 82e8f94c11 Merge pull request #27 from Kiblyn11/feat/masterkeyRpc 
Add "/rpc" flag to ask domain controller to decrypt user master key for us
 2023-04-18 15:53:02 -07:00
Kiblyn11 df4f8836d5 doc and cleanup 2023-03-28 23:55:36 +02:00
Kiblyn11 dffd58325a Cleanup 2023-03-24 18:37:32 +01:00
unknown 578fe6e35d Add /rpc flag to allow users to resquest domain controller to decrypt masterkeys in a domain 2023-03-24 18:22:26 +01:00
Dwight Hohnstein 067535dd6c misc attributes properly pulled for some relevant cookie fields. updating to latest version of editthiscookie format. 2023-02-02 09:46:03 -08:00
Will f75ab5af85 Backupkey now not line wrapped 
Backupkey now not line wrapped
 2022-12-22 11:58:22 -08:00
Will 2677293c9b Merge pull request #19 from rxwx/master 
Some masterkey features/improvements
 2022-12-09 01:54:47 -08:00
Lee Christensen 7ff2537873 support additional string types + code cleanup 2022-11-17 03:28:33 -08:00
Lee Christensen 4983bad2a0 Merge pull request #17 from guervild/object_data_sccm 
[SCCM] Credentials from objects.data
 2022-11-17 01:02:27 -08:00
guervild 3322dbfee1 Fixed regex 
Signed-off-by: guervild <11190755+guervild@users.noreply.github.com>
 2022-11-16 23:51:19 +01:00
Rich Warren af40c84336 Update README.md 2022-10-31 11:30:36 +00:00
rxwx 4ffd2bd7ec * Added option to dump masterkey hashes in john/hashcat format. 
* Added parsing of Preferred file to highlight current master key(s)
* Added auto extraction of SID using BK file or path when /server is specified
 2022-10-31 10:50:40 +00:00
rxwx a88f7acdca Fixed bug in SID extraction. This should probably be moved to its own function that also tries to extract from the BK file 2022-10-31 09:05:44 +00:00
rxwx a81caa2052 Add support for specifying passwords in NTLM format 2022-10-31 08:31:23 +00:00
rxwx 7485244de7 Add HMAC validation to 3DES SHA1 2022-10-31 08:25:55 +00:00
Lee Christensen 830becdc34 Merge pull request #18 from djhohnstein/extern_rename 
Modify BCrypt.cs in SharpChrome to use String
 2022-10-28 10:15:39 -07:00
djhohnstein b7ff226601 changed nameof to true name 2022-10-28 10:09:49 -07:00
guervild 0d1e17ed7c Add method to parse object data for sccm creds 2022-09-03 21:59:08 +02:00
Duane Michael 1afc55061d Significantly cleaned up SCCM output. 2022-07-13 10:25:21 -06:00
Duane Michael 67cc5f793f Modified sccm output 2022-07-13 09:49:00 -06:00
Duane Michael ffcfc126d9 Added SCCM to machinetriage 2022-07-11 16:31:46 -06:00
Duane Michael e7619df4fd Adjusted SCCM output 2022-07-11 16:30:59 -06:00
harmj0y b04655375c Update README.md 2022-06-06 14:05:12 -07:00
harmj0y 9df99d44f5 Version 1.11.3 
-Added ability to use "/password" with "/target" for masterkey command
-Small update to README
 2022-06-06 14:02:46 -07:00
harmj0y 81e1fcdd44 Additional error handling for SCCM command 
Additional error handling for SCCM command
 2022-05-17 11:14:16 -07:00
Will e52d744da9 Merge pull request #13 from subat0mik/master 
Added SCCM command
 2022-05-17 11:11:20 -07:00
Duane Michael 899326d5f5 Update README.md 2022-05-16 23:58:49 -06:00
Duane Michael e46fbf62b4 Update README.md 2022-05-16 23:56:46 -06:00
Duane Michael 342ca71185 Added SCCM documentation to readme 2022-05-16 23:54:08 -06:00
Duane Michael e836a83439 Fixing 2022-05-16 23:49:13 -06:00
Duane Michael d3d0505c47 Added SCCM command which includes functionality to retrieve NAA blobs via WMI and decrypt using system master keys. 2022-05-16 23:41:21 -06:00
harmj0y db6cb27aa3 Updated new Chrome cookie file locations 
-Updated new Chrome cookie file locations
 2022-01-12 17:08:07 -08:00
harmj0y a81031fe71 Version 1.11.1 
-Default elevated SharpChrome triage behavior is to triage the current user unless additional masterkey material is supplied
-/target:X can now be a user folder
-Bug fixes
 2021-03-05 09:55:28 -08:00
harmj0y 8730c3d670 Version 1.11.0 
-Added "keepass" command
-Added "/entropy" flag to "blob" command
-Fix null byte bug
 2021-03-01 13:55:21 -08:00
harmj0y 4425d8a595 Version 1.10.0 
-CNG certificate private key support
-/nowrap added to `backupkey`
-key component error fix
-combined `machinecerts` to `certificates /machine`
-fixed SHA1 "hash" calculation for entropy
-only decrypted certs now display by default, `/showall` will show all
 2021-02-25 10:37:37 -08:00
harmj0y 408e98ecd3 Version 1.9.2 
-User certificate extraction corrected
-Added more certificate information on extraction (including Enhanced Key Usages)
-Fixed a few formatting issues
-Added /target option for machinecertificates command
 2021-01-04 18:24:56 -08:00
harmj0y 6e92075c2d Updated CHANGELOG.md 2020-11-05 09:22:26 -08:00
harmj0y cfed81d01f Added /target support for 'masterkeys' 
-Added ability to manually decrypt a target masterkey file/folder
 2020-11-05 09:21:40 -08:00
harmj0y ac98a888d0 Cookies fix 
-Bug fixes for Cookies command
-Filtering fixes for Cookies
-Support for Brave browser
-Added "/quiet" flag
 2020-10-23 16:48:15 -07:00
harmj0y 5964eebc3e Version 1.9.0 
Added Chromium-based Edge support for SharpChrome
Added /consoleoutfile support for SharpDPAPI/SharpChrome
Added "statekeys" command to SharpChrome
Fixed SharpChrome cookie bug for expires times of 0
 2020-09-02 14:14:09 -07:00
harmj0y f47dacdcb3 Version 1.8.0 
Added the "search" command to search for DPAPI blobs
Removed certificate triage from the machinetriage/triage commands
Code cleanup and some refactoring
 2020-07-13 10:52:45 -07:00
Will 5480219a46 Merge pull request #9 from GhostPack/feature-discoverblobs 
Added the "search" command
 2020-07-13 10:40:51 -07:00
leechristensen d85391a2c6 update text/readme 2020-07-04 19:25:08 -07:00
leechristensen 8a28e1a5ee fixed file enumeration bug 2020-07-04 19:22:36 -07:00
leechristensen 4263c024df Adding the search command 2020-07-04 17:29:54 -07:00