admin/NetSPI-MicroBurst
1
0
Fork 0
mirror of https://github.com/NetSPI/MicroBurst synced 2026-06-08 12:01:29 +00:00
Code Issues Packages Projects Releases Wiki Activity
205 Commits 2 Branches 0 Tags
2eed7f1efef3eadcb84e178f7cf347d380dce2f0
Commit Graph

59 Commits

Author SHA1 Message Date
Karl Fosaaen 95d240ad57 Create Get-AzArcCertificates.ps1 2024-08-02 13:42:56 -07:00
Karl Fosaaen 0973a49926 Create Invoke-AzAppServicesKuduDebug.ps1 2024-05-15 12:34:14 -07:00
Alex Groyz 93904d862f add try/catch to Get-AzPasswords ACRpassword block of code 2024-04-19 13:36:52 -04:00
Karl Fosaaen b5d5f37bd4 Update Get-AzDomainInfo.ps1 2024-04-19 10:26:11 -07:00
Karl Fosaaen a8694ed711 Create Invoke-AzUADeploymentScript.ps1 2024-03-13 14:47:19 -05:00
Karl Fosaaen a7369e8b96 Create Get-AzBatchAccountData.ps1 2024-02-28 08:11:43 -08:00
Karl Fosaaen e6e0139281 Update Get-AzPasswords.ps1 
API version fix
 2024-01-25 09:50:25 -08:00
Karl Fosaaen 9d92057f64 Removed Az Imports from Scripts 2024-01-17 16:01:03 -08:00
Karl Fosaaen 8335e3fa48 Create Invoke-AzACRTokenGenerator.ps1 2024-01-03 12:38:21 -08:00
Karl Fosaaen e978c30fc5 Update Get-AzPasswords.ps1 2023-11-15 14:52:52 -06:00
Clément Notin 522bbc181c Pass TestPane option 2023-08-14 23:05:31 +02:00
Clément Notin ed428f67b6 Filter jobOutput to keep keep only lines containing the protected content 2023-08-14 22:12:01 +02:00
Clément Notin c0a0b5dba7 Create C:\Temp folder in case it doesn't exist to avoid error 2023-08-14 22:11:20 +02:00
Karl Fosaaen f88c747245 Update Get-AzPasswords.ps1 2023-07-10 13:15:22 -07:00
Karl Fosaaen 10a4f9579d Update Get-AzPasswords.ps1 
Switching to join-path for PS core compatibility
 2023-02-21 10:59:38 -08:00
Karl Fosaaen aa4394426e Update Get-AzPasswords.ps1 
Fix for empty Automation Accounts
Fix for OID generation in Key Vault policies. Allows for usage in Cloud Shell.
 2023-02-21 10:48:48 -08:00
Karl Fosaaen 06e0867828 Update Get-AzPasswords.ps1 
Bug fix for writing exported certs to a file.
 2023-02-20 15:57:35 -08:00
Karl Fosaaen 52f3a016ad Create Get-AzAutomationConnectionScope.ps1 2023-02-14 15:58:17 -08:00
Karl Fosaaen 76eed9377a Update Invoke-AzHybridWorkerExtraction.ps1 
Added support for dumping certificates from the JRDS service using the Hybrid Worker Managed Identity token.
 2023-01-26 12:50:46 -08:00
Karl Fosaaen deeeab91bf Merge branch 'master' of https://github.com/NetSPI/MicroBurst 2022-11-29 11:02:09 -08:00
Karl Fosaaen 2b482165b3 App Configuration Updates 
Added key gathering for App Configuration resources and a function (Get-AzAppConfiguration) to dump App Configuration values.
 2022-11-29 11:01:57 -08:00
Goos 6e4ab3d223 Fixed Typo 2022-10-18 17:39:50 +02:00
Goos dddb7c3201 Update Get-AzPasswords.ps1 
there is an edge case when both systemassigned and userassigned are active.
This will result in a non-hit as 'systemassigned,userassigned' does not equal 'systemassigned'
 2022-10-17 13:15:30 +02:00
Karl Fosaaen c771c665a2 Added App Service SP Extraction 2022-06-27 12:41:41 -07:00
Karl Fosaaen d0cf8d7cb2 Update Get-AzPasswords.ps1 
Bug fixes for Automation Account extraction. Added Service Principal Client ID and Secret extraction for Function Apps with integrated authentication providers.
 2022-06-23 16:24:48 -07:00
Karl Fosaaen 156c4e9f42 Update Get-AzPasswords.ps1 
Added Service Bus Keys
Added error handling for API Management issue with KV values.
 2022-05-24 16:05:17 -07:00
Andy Gill 14d341da72 fixed misspelling of function in else statement 2022-04-20 17:42:50 +01:00
Karl Fosaaen 2bf7a1fd5d Update Get-AzPasswords.ps1 2022-04-14 15:45:56 -07:00
Karl Fosaaen 9b2e700cca Update Get-AzPasswords.ps1 
Added Container App Secrets Dumping
 2022-04-14 09:27:02 -07:00
Karl Fosaaen 1109b4404b Create Invoke-AzHybridWorkerExtraction.ps1 2022-03-16 13:43:53 -07:00
Karl Fosaaen 875e37ef6c Update Get-AzPasswords.ps1 2022-02-16 11:47:40 -08:00
passthehashbrowns e7bff7f961 Added support for the "Test Pane" API to Get-AzPasswords 2022-01-26 12:06:14 -06:00
passthehashbrowns 02f0ea241b Add support for enumerating VM Extensions and custom Policies 2022-01-24 09:11:28 -06:00
passthehashbrowns a60797ef3c Updated Get-AzPasswords.ps1 to fetch managed identity tokens 2021-11-01 11:16:02 -05:00
Karl Fosaaen ef6946f61e Update Get-AzPasswords.ps1 
Added support for extracting "Key Vault Reference" App Services configuration parameters
 2021-10-06 14:02:01 -07:00
passthehashbrowns 473d94a4c8 Added Invoke-AzAppServicesCMD 2021-09-14 13:31:29 -05:00
Karl Fosaaen 439689ab43 Update Get-AzPasswords.ps1 
Small bug fixes
 2021-07-27 10:26:17 -07:00
Karl Fosaaen 4c26956ce1 Update Get-AzPasswords.ps1 
Added AKS service principal and Managed ID token extraction via VMSS command execution.
 2021-07-23 08:14:39 -07:00
passthehashbrowns a582e833b9 Added logic app enumeration 2021-07-02 10:19:20 -05:00
Karl Fosaaen 82de1d8cb0 Update Get-AzPasswords.ps1 
Added AKS cluster credential gathering option.
 2021-07-01 09:17:23 -07:00
Karl Fosaaen 5192523bdb Merge branch 'master' of https://github.com/NetSPI/MicroBurst 2021-06-02 15:11:54 -07:00
Karl Fosaaen a2fffeaa4b Update Get-AzDomainInfo.ps1 
Storage Account now only lists public list-able files, container names, and containers with "Blob" permissions. Makes the function friendly for dumping storage account info with the "Reader" role.
 2021-06-02 15:11:47 -07:00
Jake Karnes deca627e8d Recursively enumerate Owners/Contributors 
This update unifies the behavior for Owner/Contributor identification, especially in the case of nested groups. Previously, the groups were checked one level down. Now, groups underneath Owner/Contributor are recursively reviewed with their contents ultimately appended onto the CSV. The results are de-duplicated while recursing, and this should also take care of any potential circular groups (but that hasn't been tested). 

This does change the output files. Previously, the script created a new CSV for each nested Contributor group. Now there is a single InheritedContributors.csv, matching InheritedOwners.csv.
 2021-04-12 15:42:55 -07:00
Karl Fosaaen 8b9f254f49 Update Get-AzDomainInfo.ps1 
Added section to dump automation account runbooks and variables.
 2021-03-23 13:17:54 -07:00
Karl Fosaaen 3ec4cfaff4 Update Get-AzPasswords.ps1 
Fix - Error handline for resetting access policies on Key Vaults with networking restrictions.
Fix - Correct certificate name (actual versus hardcoded 'AzureRunAsCertificate') should now be requested in Automation Account connection certificate exports.
 2021-03-22 15:55:44 -07:00
Karl Fosaaen 24a81aa08a Update Get-AzPasswords.ps1 
Added support for dumping CosmosDB keys
 2021-02-22 14:44:21 -08:00
Karl Fosaaen 2b97f235c9 Minor Updates 
Removed Mimi references to help avoid triggering EDR. Corrected a logic issue on the psm1 file. Changed verb in the new REST function to match approved PS verbs.
 2021-02-12 14:29:51 -08:00
Karl Fosaaen aad543c210 Update Get-AzPasswords.ps1 2021-02-11 17:08:55 -08:00
Karl Fosaaen deee368f89 Update Get-AzPasswords.ps1 2021-02-11 17:06:30 -08:00
Karl Fosaaen 21b63f1eb9 Update Get-AzPasswords.ps1 
Added the -ModifyPolicies flag to allow you to temporarily add Get and List rights for all Keys and Secrets for your user.
 2021-02-11 17:05:37 -08:00