Commit Graph

38 Commits

Author SHA1 Message Date
Goos 6e4ab3d223 Fixed Typo 2022-10-18 17:39:50 +02:00
Goos dddb7c3201 Update Get-AzPasswords.ps1
there is an edge case when both systemassigned and userassigned are active.
This will result in a non-hit as 'systemassigned,userassigned' does not equal 'systemassigned'
2022-10-17 13:15:30 +02:00
Karl Fosaaen c771c665a2 Added App Service SP Extraction 2022-06-27 12:41:41 -07:00
Karl Fosaaen d0cf8d7cb2 Update Get-AzPasswords.ps1
Bug fixes for Automation Account extraction. Added Service Principal Client ID and Secret extraction for Function Apps with integrated authentication providers.
2022-06-23 16:24:48 -07:00
Karl Fosaaen 156c4e9f42 Update Get-AzPasswords.ps1
Added Service Bus Keys
Added error handling for API Management issue with KV values.
2022-05-24 16:05:17 -07:00
Andy Gill 14d341da72 fixed misspelling of function in else statement 2022-04-20 17:42:50 +01:00
Karl Fosaaen 2bf7a1fd5d Update Get-AzPasswords.ps1 2022-04-14 15:45:56 -07:00
Karl Fosaaen 9b2e700cca Update Get-AzPasswords.ps1
Added Container App Secrets Dumping
2022-04-14 09:27:02 -07:00
Karl Fosaaen 1109b4404b Create Invoke-AzHybridWorkerExtraction.ps1 2022-03-16 13:43:53 -07:00
Karl Fosaaen 875e37ef6c Update Get-AzPasswords.ps1 2022-02-16 11:47:40 -08:00
passthehashbrowns e7bff7f961 Added support for the "Test Pane" API to Get-AzPasswords 2022-01-26 12:06:14 -06:00
passthehashbrowns 02f0ea241b Add support for enumerating VM Extensions and custom Policies 2022-01-24 09:11:28 -06:00
passthehashbrowns a60797ef3c Updated Get-AzPasswords.ps1 to fetch managed identity tokens 2021-11-01 11:16:02 -05:00
Karl Fosaaen ef6946f61e Update Get-AzPasswords.ps1
Added support for extracting "Key Vault Reference" App Services configuration parameters
2021-10-06 14:02:01 -07:00
passthehashbrowns 473d94a4c8 Added Invoke-AzAppServicesCMD 2021-09-14 13:31:29 -05:00
Karl Fosaaen 439689ab43 Update Get-AzPasswords.ps1
Small bug fixes
2021-07-27 10:26:17 -07:00
Karl Fosaaen 4c26956ce1 Update Get-AzPasswords.ps1
Added AKS service principal and Managed ID token extraction via VMSS command execution.
2021-07-23 08:14:39 -07:00
passthehashbrowns a582e833b9 Added logic app enumeration 2021-07-02 10:19:20 -05:00
Karl Fosaaen 82de1d8cb0 Update Get-AzPasswords.ps1
Added AKS cluster credential gathering option.
2021-07-01 09:17:23 -07:00
Karl Fosaaen 5192523bdb Merge branch 'master' of https://github.com/NetSPI/MicroBurst 2021-06-02 15:11:54 -07:00
Karl Fosaaen a2fffeaa4b Update Get-AzDomainInfo.ps1
Storage Account now only lists public list-able files, container names, and containers with "Blob" permissions. Makes the function friendly for dumping storage account info with the "Reader" role.
2021-06-02 15:11:47 -07:00
Jake Karnes deca627e8d Recursively enumerate Owners/Contributors
This update unifies the behavior for Owner/Contributor identification, especially in the case of nested groups. Previously, the groups were checked one level down. Now, groups underneath Owner/Contributor are recursively reviewed with their contents ultimately appended onto the CSV. The results are de-duplicated while recursing, and this should also take care of any potential circular groups (but that hasn't been tested). 

This does change the output files. Previously, the script created a new CSV for each nested Contributor group. Now there is a single InheritedContributors.csv, matching InheritedOwners.csv.
2021-04-12 15:42:55 -07:00
Karl Fosaaen 8b9f254f49 Update Get-AzDomainInfo.ps1
Added section to dump automation account runbooks and variables.
2021-03-23 13:17:54 -07:00
Karl Fosaaen 3ec4cfaff4 Update Get-AzPasswords.ps1
Fix - Error handline for resetting access policies on Key Vaults with networking restrictions.
Fix - Correct certificate name (actual versus hardcoded 'AzureRunAsCertificate') should now be requested in Automation Account connection certificate exports.
2021-03-22 15:55:44 -07:00
Karl Fosaaen 24a81aa08a Update Get-AzPasswords.ps1
Added support for dumping CosmosDB keys
2021-02-22 14:44:21 -08:00
Karl Fosaaen 2b97f235c9 Minor Updates
Removed Mimi references to help avoid triggering EDR. Corrected a logic issue on the psm1 file. Changed verb in the new REST function to match approved PS verbs.
2021-02-12 14:29:51 -08:00
Karl Fosaaen aad543c210 Update Get-AzPasswords.ps1 2021-02-11 17:08:55 -08:00
Karl Fosaaen deee368f89 Update Get-AzPasswords.ps1 2021-02-11 17:06:30 -08:00
Karl Fosaaen 21b63f1eb9 Update Get-AzPasswords.ps1
Added the -ModifyPolicies flag to allow you to temporarily add Get and List rights for all Keys and Secrets for your user.
2021-02-11 17:05:37 -08:00
Karl Fosaaen f646c94515 Update Get-AzPasswords.ps1
Added fix for broken SecureString casting in the secrets output.
2021-01-26 09:16:17 -08:00
Karl Fosaaen cce95ce5db Updating Bing API URL 2021-01-04 09:47:21 -08:00
Karl Fosaaen 5f0f730249 Output encryption for Automation Accounts
Added cert-based encryption for the output from Azure Automation account runbooks. Protects any passwords from ending up in cleartext in job output.
2020-07-15 07:25:42 -07:00
Karl Fosaaen 7af029e146 Update Get-AzPasswords.ps1
Small error handling fix.
2020-07-08 16:52:33 -07:00
Karl Fosaaen 2bbdeb56ba Get-AzPasswords Updates
Now handles exporting certificates for multiple Automation Account connections.
2020-07-08 15:02:29 -07:00
Karl Fosaaen d1ae380d99 Fix
Fixed blob file listing output
2020-05-18 17:45:55 -07:00
Karl Fosaaen 55f5897ac2 AzPasswords Updates
Added support for dumping ACR admin passwords and Storage Account keys.
2020-04-30 16:00:19 -07:00
Karl Fosaaen 33e876c303 Repo Reorganization
Moved ps1 files to appropriate folders and upated the base psm1 file.
2020-03-19 09:23:13 -07:00
Karl Fosaaen 95a3471cbb Moving Areund Files
Reorganizing for the rewrite of modules to the Az cmdlets
2020-03-13 16:01:00 -07:00