Karl Fosaaen
76eed9377a
Update Invoke-AzHybridWorkerExtraction.ps1
...
Added support for dumping certificates from the JRDS service using the Hybrid Worker Managed Identity token.
2023-01-26 12:50:46 -08:00
Karl Fosaaen
deeeab91bf
Merge branch 'master' of https://github.com/NetSPI/MicroBurst
2022-11-29 11:02:09 -08:00
Karl Fosaaen
2b482165b3
App Configuration Updates
...
Added key gathering for App Configuration resources and a function (Get-AzAppConfiguration) to dump App Configuration values.
2022-11-29 11:01:57 -08:00
Goos
6e4ab3d223
Fixed Typo
2022-10-18 17:39:50 +02:00
Goos
dddb7c3201
Update Get-AzPasswords.ps1
...
there is an edge case when both systemassigned and userassigned are active.
This will result in a non-hit as 'systemassigned,userassigned' does not equal 'systemassigned'
2022-10-17 13:15:30 +02:00
Karl Fosaaen
c771c665a2
Added App Service SP Extraction
2022-06-27 12:41:41 -07:00
Karl Fosaaen
d0cf8d7cb2
Update Get-AzPasswords.ps1
...
Bug fixes for Automation Account extraction. Added Service Principal Client ID and Secret extraction for Function Apps with integrated authentication providers.
2022-06-23 16:24:48 -07:00
Karl Fosaaen
156c4e9f42
Update Get-AzPasswords.ps1
...
Added Service Bus Keys
Added error handling for API Management issue with KV values.
2022-05-24 16:05:17 -07:00
Andy Gill
14d341da72
fixed misspelling of function in else statement
2022-04-20 17:42:50 +01:00
Karl Fosaaen
2bf7a1fd5d
Update Get-AzPasswords.ps1
2022-04-14 15:45:56 -07:00
Karl Fosaaen
9b2e700cca
Update Get-AzPasswords.ps1
...
Added Container App Secrets Dumping
2022-04-14 09:27:02 -07:00
Karl Fosaaen
1109b4404b
Create Invoke-AzHybridWorkerExtraction.ps1
2022-03-16 13:43:53 -07:00
Karl Fosaaen
875e37ef6c
Update Get-AzPasswords.ps1
2022-02-16 11:47:40 -08:00
passthehashbrowns
e7bff7f961
Added support for the "Test Pane" API to Get-AzPasswords
2022-01-26 12:06:14 -06:00
passthehashbrowns
02f0ea241b
Add support for enumerating VM Extensions and custom Policies
2022-01-24 09:11:28 -06:00
passthehashbrowns
a60797ef3c
Updated Get-AzPasswords.ps1 to fetch managed identity tokens
2021-11-01 11:16:02 -05:00
Karl Fosaaen
ef6946f61e
Update Get-AzPasswords.ps1
...
Added support for extracting "Key Vault Reference" App Services configuration parameters
2021-10-06 14:02:01 -07:00
passthehashbrowns
473d94a4c8
Added Invoke-AzAppServicesCMD
2021-09-14 13:31:29 -05:00
Karl Fosaaen
439689ab43
Update Get-AzPasswords.ps1
...
Small bug fixes
2021-07-27 10:26:17 -07:00
Karl Fosaaen
4c26956ce1
Update Get-AzPasswords.ps1
...
Added AKS service principal and Managed ID token extraction via VMSS command execution.
2021-07-23 08:14:39 -07:00
passthehashbrowns
a582e833b9
Added logic app enumeration
2021-07-02 10:19:20 -05:00
Karl Fosaaen
82de1d8cb0
Update Get-AzPasswords.ps1
...
Added AKS cluster credential gathering option.
2021-07-01 09:17:23 -07:00
Karl Fosaaen
5192523bdb
Merge branch 'master' of https://github.com/NetSPI/MicroBurst
2021-06-02 15:11:54 -07:00
Karl Fosaaen
a2fffeaa4b
Update Get-AzDomainInfo.ps1
...
Storage Account now only lists public list-able files, container names, and containers with "Blob" permissions. Makes the function friendly for dumping storage account info with the "Reader" role.
2021-06-02 15:11:47 -07:00
Jake Karnes
deca627e8d
Recursively enumerate Owners/Contributors
...
This update unifies the behavior for Owner/Contributor identification, especially in the case of nested groups. Previously, the groups were checked one level down. Now, groups underneath Owner/Contributor are recursively reviewed with their contents ultimately appended onto the CSV. The results are de-duplicated while recursing, and this should also take care of any potential circular groups (but that hasn't been tested).
This does change the output files. Previously, the script created a new CSV for each nested Contributor group. Now there is a single InheritedContributors.csv, matching InheritedOwners.csv.
2021-04-12 15:42:55 -07:00
Karl Fosaaen
8b9f254f49
Update Get-AzDomainInfo.ps1
...
Added section to dump automation account runbooks and variables.
2021-03-23 13:17:54 -07:00
Karl Fosaaen
3ec4cfaff4
Update Get-AzPasswords.ps1
...
Fix - Error handline for resetting access policies on Key Vaults with networking restrictions.
Fix - Correct certificate name (actual versus hardcoded 'AzureRunAsCertificate') should now be requested in Automation Account connection certificate exports.
2021-03-22 15:55:44 -07:00
Karl Fosaaen
24a81aa08a
Update Get-AzPasswords.ps1
...
Added support for dumping CosmosDB keys
2021-02-22 14:44:21 -08:00
Karl Fosaaen
2b97f235c9
Minor Updates
...
Removed Mimi references to help avoid triggering EDR. Corrected a logic issue on the psm1 file. Changed verb in the new REST function to match approved PS verbs.
2021-02-12 14:29:51 -08:00
Karl Fosaaen
aad543c210
Update Get-AzPasswords.ps1
2021-02-11 17:08:55 -08:00
Karl Fosaaen
deee368f89
Update Get-AzPasswords.ps1
2021-02-11 17:06:30 -08:00
Karl Fosaaen
21b63f1eb9
Update Get-AzPasswords.ps1
...
Added the -ModifyPolicies flag to allow you to temporarily add Get and List rights for all Keys and Secrets for your user.
2021-02-11 17:05:37 -08:00
Karl Fosaaen
f646c94515
Update Get-AzPasswords.ps1
...
Added fix for broken SecureString casting in the secrets output.
2021-01-26 09:16:17 -08:00
Karl Fosaaen
cce95ce5db
Updating Bing API URL
2021-01-04 09:47:21 -08:00
Karl Fosaaen
5f0f730249
Output encryption for Automation Accounts
...
Added cert-based encryption for the output from Azure Automation account runbooks. Protects any passwords from ending up in cleartext in job output.
2020-07-15 07:25:42 -07:00
Karl Fosaaen
7af029e146
Update Get-AzPasswords.ps1
...
Small error handling fix.
2020-07-08 16:52:33 -07:00
Karl Fosaaen
2bbdeb56ba
Get-AzPasswords Updates
...
Now handles exporting certificates for multiple Automation Account connections.
2020-07-08 15:02:29 -07:00
Karl Fosaaen
d1ae380d99
Fix
...
Fixed blob file listing output
2020-05-18 17:45:55 -07:00
Karl Fosaaen
55f5897ac2
AzPasswords Updates
...
Added support for dumping ACR admin passwords and Storage Account keys.
2020-04-30 16:00:19 -07:00
Karl Fosaaen
33e876c303
Repo Reorganization
...
Moved ps1 files to appropriate folders and upated the base psm1 file.
2020-03-19 09:23:13 -07:00
Karl Fosaaen
95a3471cbb
Moving Areund Files
...
Reorganizing for the rewrite of modules to the Az cmdlets
2020-03-13 16:01:00 -07:00