diff --git a/nxc/modules/gpp_privileges.py b/nxc/modules/gpp_privileges.py index 0a638618..5f6a8496 100644 --- a/nxc/modules/gpp_privileges.py +++ b/nxc/modules/gpp_privileges.py @@ -15,7 +15,7 @@ class NXCModule: name = "gpp_privileges" description = "Extracts privileges assigned via GPOs and resolves SIDs via LDAP." supported_protocols = ["smb"] - category = CATEGORY.PRIVILEGE_ESCALATION + category = CATEGORY.ENUMERATION WELL_KNOWN_SIDS = { "S-1-0": "Null Authority", diff --git a/nxc/modules/recent_files.py b/nxc/modules/recent_files.py index 748d60ae..29141aa7 100644 --- a/nxc/modules/recent_files.py +++ b/nxc/modules/recent_files.py @@ -10,7 +10,7 @@ class NXCModule: name = "recent_files" description = "Extracts recently modified files" supported_protocols = ["smb"] - category = CATEGORY.PRIVILEGE_ESCALATION + category = CATEGORY.CREDENTIAL_DUMPING false_positive = [".", "..", "desktop.ini", "Public", "Default", "Default User", "All Users", ".NET v4.5", ".NET v4.5 Classic"] def options(self, context, module_options): diff --git a/nxc/modules/uac.py b/nxc/modules/uac.py index abbeaa46..115977b3 100644 --- a/nxc/modules/uac.py +++ b/nxc/modules/uac.py @@ -9,7 +9,7 @@ class NXCModule: name = "uac" description = "Checks UAC status" supported_protocols = ["smb"] - category = CATEGORY.PRIVILEGE_ESCALATION + category = CATEGORY.ENUMERATION def __init__(self, context=None, module_options=None): self.context = context