Commit Graph

Select branches

Hide Pull Requests

feature-discoverblobs

local-sha1

localstatefile

master

#1

#13

#15

#17

#18

#19

#2

#21

#21

#22

#23

#24

#25

#26

#26

#27

#29

#3

#30

#31

#32

#34

#35

#36

#37

#39

#40

#7

#9

1.12.0

Mono Color

• 4428263fe8 Merge pull request #36 from byinarie/patch-1 master Lee Chagolla-Christensen 2024-06-27 06:39:08 -07:00
• bfabd48889 Merge pull request #39 from Bebop79/master Lee Chagolla-Christensen 2024-06-27 06:37:36 -07:00
• a2f8017972 Merge pull request #40 from atticuss-sra/chrome_bugfix Lee Chagolla-Christensen 2024-06-27 06:36:01 -07:00
• 712fb88adc fix chrome parsing issue Jonn Callahan 2024-06-21 11:11:47 +00:00
• 7d744a7562 Update README.md Bebop79 2024-06-05 16:40:23 -07:00
• 7eecafe4ac Merge pull request #37 from subat0mik/master Will 2024-02-23 17:14:36 -08:00
• d1a048c8f9 Changed uses of the *CryptoServiceProvider classes to *Managed in lib\Triage.cs Duane Michael 2024-02-22 13:31:37 -07:00
• 8e805cef8c Changed uses of the *CryptoServiceProvider class to *Managed in lib\Dpapi.cs Duane Michael 2024-02-22 13:30:31 -07:00
• 59fc248830 Changed uses of the (CryptoServiceProvider classes to *Managed in lib\Crypto.cs Duane Michael 2024-02-22 13:28:40 -07:00
• a095233577 Changed uses of the AesCryptoServiceProvider class to AesManaged in the sqllite crypto.cs Duane Michael 2024-02-22 13:24:11 -07:00
• 10a00700b8 Addressed FIPS issues by not enforcing FIPS policy in app.config Duane Michael 2024-02-22 13:21:06 -07:00
• 1ee41c905f Changed LSAAESDecrypt to use the AesManaged class instead of AesCryptoServiceProvider Duane Michael 2024-02-22 13:13:12 -07:00
• 05d657ed7c Update README.md PJ 2024-02-17 02:16:21 -06:00
• a9649ad03b Renamed prekey to credkey Will 2023-12-14 15:40:20 -08:00
• 049f35e54b Update README.md 1.12.0 harmj0y 2023-12-14 14:48:31 -08:00
• 709f9bca80 Update README Will 2023-12-14 14:41:08 -08:00
• 1bc590277e Update CHANGELOG harmj0y 2023-12-14 14:23:10 -08:00
• e410f19ba9 Merge pull request #35 from GhostPack/local-sha1 Will 2023-12-14 14:03:24 -08:00
• 3dcfce2960 Added support for local prekey local-sha1 Will 2023-12-14 14:03:05 -08:00
• 1e15a52aa6 Merge pull request #34 from GhostPack/Version-1.12.0 Will 2023-12-14 13:26:10 -08:00
• 670f2155da Merge branch 'master' into Version-1.12.0 Will 2023-12-14 13:25:28 -08:00
• f81707ef78 Merge branch 'pr/31' Will 2023-12-14 13:22:22 -08:00
• 8c9502aa2a Merge branch 'master' into pr/22 Will 2023-12-14 13:20:27 -08:00
• b3482343ec Start of version 1.12.0 Will 2023-12-13 18:03:56 -08:00
• 225a1fdcd7 loosen access/sharing when trying to read files Lee Christensen 2023-11-09 15:50:56 -08:00
• 79f9e41dda Merge pull request #23 from ptr0x1/master Lee Christensen 2023-11-07 10:28:35 -08:00
• 54bb9f87a4 Merge pull request #29 from 001SPARTaN/master Lee Christensen 2023-11-07 10:26:35 -08:00
• b706ee51ac Merge pull request #32 from GhostPack/localstatefile Lee Christensen 2023-11-07 10:25:19 -08:00
• cda059a01c update docs localstatefile Lee Christensen 2023-11-07 10:17:08 -08:00
• 4844a0fd79 added slack support to statekeys/cookies commands Lee Christensen 2023-11-07 10:10:34 -08:00
• d241fef22d update docs Lee Christensen 2023-11-07 10:02:28 -08:00
• 70ee50ce83 add ability to specify local state file Lee Christensen 2023-11-06 17:17:08 -08:00
• 421357327c When running as local admin and getting the hashes of all masterkeys for all the users, the SID of the user now matches the right one clod 2023-10-30 17:45:49 +13:00
• a76e5e8f5b Swapped Managed API usage for their CryptoServiceProvider alternatives to solve issues on systems with 'Use FIPS compliant algorithms for encryption, hashing, and signing' enabled. Calvin Hedler 2023-08-28 11:54:07 -07:00
• 02992ff2c5 Merge pull request #25 from djhohnstein/master Will 2023-04-21 11:58:40 -07:00
• 82e8f94c11 Merge pull request #27 from Kiblyn11/feat/masterkeyRpc Will 2023-04-18 15:53:02 -07:00
• df4f8836d5 doc and cleanup Kiblyn11 2023-03-28 23:55:36 +02:00
• dffd58325a Cleanup Kiblyn11 2023-03-24 18:37:32 +01:00
• 578fe6e35d Add /rpc flag to allow users to resquest domain controller to decrypt masterkeys in a domain unknown 2023-03-24 18:22:26 +01:00
• 067535dd6c misc attributes properly pulled for some relevant cookie fields. updating to latest version of editthiscookie format. Dwight Hohnstein 2023-02-02 09:46:03 -08:00
• 8cb5409f18 adding user-context unprotect option for certificates ptr0x1 2023-01-10 13:58:26 +00:00
• c8110790a0 Add Teams statekey support Franci Šacer 2023-01-06 13:06:50 +01:00
• f75ab5af85 Backupkey now not line wrapped Will 2022-12-22 11:58:22 -08:00
• 2677293c9b Merge pull request #19 from rxwx/master Will 2022-12-09 01:54:47 -08:00
• 7ff2537873 support additional string types + code cleanup Lee Christensen 2022-11-17 03:28:33 -08:00
• 4983bad2a0 Merge pull request #17 from guervild/object_data_sccm Lee Christensen 2022-11-17 01:02:27 -08:00
• 3322dbfee1 Fixed regex guervild 2022-11-16 23:51:19 +01:00
• af40c84336 Update README.md Rich Warren 2022-10-31 11:30:36 +00:00
• 4ffd2bd7ec * Added option to dump masterkey hashes in john/hashcat format. * Added parsing of Preferred file to highlight current master key(s) * Added auto extraction of SID using BK file or path when /server is specified rxwx 2022-10-31 10:50:40 +00:00
• a88f7acdca Fixed bug in SID extraction. This should probably be moved to its own function that also tries to extract from the BK file rxwx 2022-10-31 09:05:44 +00:00
• a81caa2052 Add support for specifying passwords in NTLM format rxwx 2022-10-31 08:31:23 +00:00
• 7485244de7 Add HMAC validation to 3DES SHA1 rxwx 2022-10-31 08:25:55 +00:00
• 830becdc34 Merge pull request #18 from djhohnstein/extern_rename Lee Christensen 2022-10-28 10:15:39 -07:00
• b7ff226601 changed nameof to true name djhohnstein 2022-10-28 10:09:49 -07:00
• 0d1e17ed7c Add method to parse object data for sccm creds guervild 2022-09-03 21:59:08 +02:00
• 1afc55061d Significantly cleaned up SCCM output. Duane Michael 2022-07-13 10:25:21 -06:00
• 67cc5f793f Modified sccm output Duane Michael 2022-07-13 09:49:00 -06:00
• ffcfc126d9 Added SCCM to machinetriage Duane Michael 2022-07-11 16:31:46 -06:00
• e7619df4fd Adjusted SCCM output Duane Michael 2022-07-11 16:30:59 -06:00
• b04655375c Update README.md harmj0y 2022-06-06 14:05:12 -07:00
• 9df99d44f5 Version 1.11.3 harmj0y 2022-06-06 14:02:46 -07:00
• 81e1fcdd44 Additional error handling for SCCM command harmj0y 2022-05-17 11:14:16 -07:00
• e52d744da9 Merge pull request #13 from subat0mik/master Will 2022-05-17 11:11:20 -07:00
• 899326d5f5 Update README.md Duane Michael 2022-05-16 23:58:49 -06:00
• e46fbf62b4 Update README.md Duane Michael 2022-05-16 23:56:46 -06:00
• 342ca71185 Added SCCM documentation to readme Duane Michael 2022-05-16 23:54:08 -06:00
• e836a83439 Fixing Duane Michael 2022-05-16 23:49:13 -06:00
• d3d0505c47 Added SCCM command which includes functionality to retrieve NAA blobs via WMI and decrypt using system master keys. Duane Michael 2022-05-16 23:41:21 -06:00
• db6cb27aa3 Updated new Chrome cookie file locations harmj0y 2022-01-12 17:08:07 -08:00
• a81031fe71 Version 1.11.1 harmj0y 2021-03-05 09:55:28 -08:00
• 8730c3d670 Version 1.11.0 harmj0y 2021-03-01 13:55:21 -08:00
• 4425d8a595 Version 1.10.0 harmj0y 2021-02-25 10:37:37 -08:00
• 408e98ecd3 Version 1.9.2 harmj0y 2021-01-04 18:24:56 -08:00
• 6e92075c2d Updated CHANGELOG.md harmj0y 2020-11-05 09:22:26 -08:00
• cfed81d01f Added /target support for 'masterkeys' harmj0y 2020-11-05 09:21:40 -08:00
• ac98a888d0 Cookies fix harmj0y 2020-10-23 16:48:15 -07:00
• 5964eebc3e Version 1.9.0 harmj0y 2020-09-02 14:14:09 -07:00
• f47dacdcb3 Version 1.8.0 harmj0y 2020-07-13 10:52:45 -07:00
• 5480219a46 Merge pull request #9 from GhostPack/feature-discoverblobs Will 2020-07-13 10:40:51 -07:00
• d85391a2c6 update text/readme feature-discoverblobs leechristensen 2020-07-04 19:25:08 -07:00
• 8a28e1a5ee fixed file enumeration bug leechristensen 2020-07-04 19:22:36 -07:00
• 4263c024df Adding the search command leechristensen 2020-07-04 17:29:54 -07:00
• 8ed8953f2b Adding the search command leechristensen 2020-07-04 17:29:35 -07:00
• 563651494d more cleanups leechristensen 2020-07-01 19:22:18 -07:00
• 06c6283169 code cleanup and refactoring leechristensen 2020-07-01 19:18:11 -07:00
• ea8abe46f2 Version 1.7.0 harmj0y 2020-05-06 12:29:35 -07:00
• 09e3a628f1 Merge pull request #7 from leftp/master Will 2020-05-06 11:33:57 -07:00
• 4fbe9a1eed Support for decrypting dpapi encrypted certificates Eleftherios Panos 2020-05-02 14:44:46 +03:00
• dd3427178a Bug fix harmj0y 2020-03-30 11:16:27 -07:00
• 4662551256 Version 1.6.1 harmj0y 2020-03-29 16:50:04 -07:00
• 3e95f5b37b Version 1.6.0 harmj0y 2020-03-27 15:03:09 -07:00
• ea20909625 Merge pull request #3 from leftp/dev_branch Will 2020-03-27 14:10:30 -07:00
• 351b73a941 Added support for decryption of masterkeys with user password epan 2020-03-26 13:53:09 +02:00
• f530523981 Version 1.5.1 harmj0y 2019-12-18 12:04:31 -08:00
• c8563d31a6 Version 1.5.0 -Added *ps* command to decrypt exported PSCredential .xmls (thanks for the idea @gentilkiwi ;) -Added README section for the *blob* command -Misc. small output tweaks HarmJ0y 2019-07-25 13:37:36 -07:00
• d597b546d6 machinetriage bug fix HarmJ0y 2019-06-12 21:03:56 -04:00
• 9ac8f4b28a reorganized README HarmJ0y 2019-05-23 09:54:29 -07:00
• 2e6ea8c140 updated README HarmJ0y 2019-05-22 22:21:07 -07:00
• 9429ac19ba Version 1.4.0 - SharpChrome update See CHANGELOG for complete change details and README for usage. HarmJ0y 2019-05-22 22:19:47 -07:00
• 800a4a1ecc Version 1.3.1 -When using /server:X, .RDG files parsed from RDCMan.settings files are translated to UNC paths for parsing -triage command when used against a remote /server:X now works properly HarmJ0y 2019-05-09 18:56:43 -07:00