Commit Graph

11 Commits

Author SHA1 Message Date
byt3bl33d3r d256444cb5 This commit should resolve issue #92
Changed the way the tokens module opens a read handle to the USERFILE
2016-04-16 19:48:07 -06:00
byt3bl33d3r a56ad587ec Revamped the mimikatz module's credential parsing (Stole it from Empire)
Implemented proper handling of hashes if only the nthash is supplied
2016-04-16 19:30:23 -06:00
byt3bl33d3r f6c2c2f24d Added the get_group_members module 2016-04-12 01:07:25 -06:00
byt3bl33d3r e5e954068a Added options in token module to search for a specific username in
enumerated tokens
2016-04-12 00:09:08 -06:00
byt3bl33d3r b85a4ecabd Database navigator now supports filtering seearching through hosts and creds (like Empire) 2016-04-11 23:06:42 -06:00
byt3bl33d3r cd9a77796f This commit introduces a command in cme_db.py which will import
credentials from Empire using it's RESTful API (resolves half of issue #89)

Reading through Metasploit's docs, it seems like you cannot access
it's stored credentials using the RPC server (would have to directly
access the postgres db, I do have to confirm this tho)
2016-04-10 17:10:33 -06:00
byt3bl33d3r eb4f185118 Database now tracks which users have admin access to which hosts
Added a configuration file for specifying Empire's and Metasploits API and RPC creds
Added the empire_agent_exec module: connects to Empire, generates a launcher and executes it

Minor bug fixes
2016-04-08 00:25:06 -06:00
byt3bl33d3r cd989879d4 Removed debug statement and fixed output in tokens.py module 2016-03-30 13:11:28 -06:00
byt3bl33d3r 7bfe04236a Added a tokens module to enumerate available tokens
Added a --server-host flag to specify the IP to bind the server to
2016-03-30 12:58:55 -06:00
byt3bl33d3r 0bc0855c43 Added default mimikatz command to module description 2016-03-28 00:42:42 -06:00
byt3bl33d3r 10a12a9a0f Initial v3.0 commit to master
Quick re-cap on the new features:

* Credentials and hosts are now stored in a database, the cme_db.py script can be used to query it
* Module system has been implemented allowing anyone to create payloads
* All underlying powershell code has been ported to a module
* The HTTP/HTTPS server now tracks connections: no more guessing when to CTRL-C
* All around better code quality, error handling and logging
2016-03-27 15:17:18 -06:00