3460931d6b
Add checks for NBTNS and Powershell v2
2023-05-03 18:20:38 +02:00
dd08ae0d86
Implement several checks
...
Administrator's name
Spooler service
WSUS configuration
Guest account
Powershell execution policy
2023-05-02 20:35:56 +02:00
cddbd26119
Add LAPS check
2023-04-28 19:29:40 +02:00
e6d7e81d7b
Finish simple registry checks and add last update check
2023-04-28 16:45:58 +02:00
baa1c78068
New module for checking Windows configuration
2023-04-27 15:54:51 +02:00
ada917cc02
Update masky module (v0.2.0)
2023-02-13 23:20:17 +01:00
d00a9bafeb
Fix RDP login
...
Fix RDP login, major breaking change so it is also commited on the public repo
2023-01-02 12:43:27 +01:00
31542973d7
Fix smb nthash not display with kerberos
2022-11-29 17:05:15 -05:00
a4c89ef561
Bump to 5.4.1
2022-11-29 16:46:26 -05:00
99cea583e9
Add kerberos compatibility for laps option
2022-11-29 16:46:25 -05:00
a3046f657b
Fixed bh_owned error on non-existing values
...
If a computer on the network has been compromised but is not listed in the Neo4j database. CME won't crash any more.
2022-11-25 16:58:52 +05:00
7c684bcffb
Fix --enabled option to dump only enabled accounts
...
This change allows the option to work as expected and also includes an option to grep a list of users.
2022-11-22 14:28:57 -04:00
81b53b9652
Modify remove_credentials to allow "creds remove"
...
`creds remove CredID` was not working because the method was commented on, I also changed the table name from credentials to users.
2022-11-17 11:18:13 -04:00
2c4be7b9e4
Fix cmedb displayed credentials for mssql
...
The columns were not in the correct order, which caused them to be displayed incorrectly. This change properly orders the way CMEDB displays credentials in the mssql protocol.
2022-11-17 09:27:01 -04:00
4a12e437fa
mssql - Retrieve username when using Kerberos Auth
...
This change allows the program to return the name of the user being authenticated when using Kerberos with the protocol mssql.
2022-11-16 16:39:44 -04:00
bd5a3fe91d
Add - Retrieve username when using Kerberos Auth
...
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-11-16 16:15:30 -04:00
baceb06afd
Add - Retrieve username when using Kerberos Auth
...
This change allows the program to return the name of the user being authenticated when using Kerberos.
2022-11-16 16:06:43 -04:00
25978c0be0
Update smb.py
2022-11-10 22:06:35 +01:00
193ce4128e
SMB kerberos better you can put ip whithout fqdn
2022-11-10 04:17:09 -05:00
a88a6e8552
Add catch for kerberos use-kcache option with error message
2022-11-09 16:59:53 -05:00
667faa0d7b
Add catch for kerberos use-kcache option
2022-11-09 16:56:57 -05:00
a5c30851c0
Fix output always returning false
...
Based on Neo4j documentation https://neo4j.com/docs/api/python-driver/current/api.html#neo4j.Result I added some modification to the result variable.
The way it was code, `result.value()` always return 0.
2022-11-09 15:39:43 -04:00
ba690f93fd
Added the option to select architecture (64 or 32)
...
The module only allowed 32 bits, with this change it is possible to select 32 bits or 64 bits architecture.
2022-11-09 07:07:29 -04:00
ccfd9565e0
Fix #671 - handlekatz modules fail
...
handlekatz modules fail if directory /tmp/shared does not exist. I changed the directory from /tmp/shared to /tmp and the option description.
2022-11-08 11:14:00 -04:00
61757a2cd2
Fix #671 - procdump modules fail
...
procdump modules fail if directory /tmp/shared does not exist. I changed the directory from /tmp/shared to /tmp and the option description.
2022-11-08 11:13:05 -04:00
0990b4fa8b
bugfix : cant export csv
2022-11-08 15:15:54 +01:00
e4f6343646
Bump to 5.4.0
2022-11-08 05:08:23 -05:00
be6b0edd42
Merge pull request #662 from Porchetta-Industries/rdp
...
Bump aardwolf to version 0.2.0
2022-11-08 09:31:58 +01:00
8fedcc48b7
Update rdp.py
2022-11-08 09:25:59 +01:00
4562cea72a
Merge pull request #669 from juliourena/master
...
Fix #668 - Remove @requires_admin flag for WMI queries
2022-11-07 21:07:29 +01:00
60e3dda195
Merge pull request #601 from Dfte/master
...
Add the Impersonate module
2022-11-07 12:26:37 +01:00
47a92590a6
Remove @requires_admin flag for WMI queries
...
Although not common, it is possible for a user to be assigned WMI privileges. Removing @requires_admin in case we do not have privileges to make queries to WMI we will receive an access denied error, which makes it clearer what is happening.
2022-11-04 07:45:47 -04:00
b2bcbe0ade
Fix issue #667 with use-kcache option
2022-11-03 16:04:46 -04:00
83180a6b68
ldap better error message
2022-11-03 15:56:38 -04:00
49d68e0269
fix error with connection outside dc
2022-11-03 15:29:56 -04:00
37f2555ab7
Merge branch 'screenrdp' into rdp
2022-11-02 15:39:17 -04:00
33a3c61242
update rdp proto
2022-11-02 15:39:14 -04:00
4fabd0843a
Added an NLA disabled screenshot function
2022-11-02 18:47:32 +01:00
12ec7f2278
update impersonate binary
2022-11-02 07:23:07 -04:00
6a31c588a2
update ldap proto and add func get domain sid
2022-11-01 18:20:14 -04:00
3eb80ae534
Modify logging output when putting files
...
Added \\ to match the correct display of the file and path.
2022-11-01 08:10:55 -04:00
cc72c6c868
Remove @requires_admin from get_file and put_file
...
The @requires_admin flag prevents non-admin users who have Read and Write access to a shared folder from performing any operations.
2022-11-01 07:29:56 -04:00
a36d3145e1
Merge pull request #655 from zblurx/master
...
Fix kerberos authentication and add kerbrute
2022-10-31 13:34:03 +01:00
3942eab31b
update a little bit
2022-10-31 08:33:41 -04:00
5d4f3b5606
Update impersonate.py
...
I'll add technical links to the blog post explaining token manipulation internals as well as the source code of the original binary when the blog post will be released (should be on monday)
2022-10-29 11:55:34 +02:00
1bfb3a860b
Addind the IMP_EXE option
...
Guess this will be the final one :P
2022-10-29 11:52:48 +02:00
9c66f29474
Merge branch 'master' into rdp
2022-10-28 15:22:28 +02:00
dc6b023456
update RDP protocol
2022-10-27 16:43:52 -04:00
fedbfaf1f5
Change default order of exec method for smb
2022-10-27 15:40:34 -04:00
aa8bf6aa46
Refactor options
2022-10-27 15:32:55 -04:00
François REYNAUD