Commit Graph

  • af3677ebb6 Remove replace call to ensure windows compatability Alexander Neff 2025-10-22 22:51:16 +02:00
  • bfbfaa954c Use file format from connection object Alexander Neff 2025-10-22 22:50:43 +02:00
  • f8e69c12cd Refactor filename templating for logs Alexander Neff 2025-10-22 22:32:50 +02:00
  • 35885b51d1 Update dump-computers.py crosscutsaw 2025-10-22 20:11:14 +03:00
  • 56b74aed8c remove certificate from user store after PFX export azoxlpf 2025-10-22 17:21:46 +02:00
  • 55a80ecda5 Add short delay for check so cleanup is through Alexander Neff 2025-10-22 11:15:49 -04:00
  • b3384a0971 Remove dependency to get-output-tries Alexander Neff 2025-10-22 10:32:16 -04:00
  • bdd3722f48 Merge pull request #969 from Pennyw0rth/neff-improve-computers Alex 2025-10-22 14:26:01 +02:00
  • 9e8a8b7c40 Query the samaccountname instead of queryint the name and appending the dollar sign Alexander Neff 2025-10-22 06:39:48 -04:00
  • 4ca939c96a Update firefox.py for new AES-256-CBC encryption hilarex 2025-10-22 10:09:36 +02:00
  • 742ed96f7f Removed print_msg(), convert to display() danwroy 2025-10-20 14:39:24 -07:00
  • 7fc7806df0 Update 120s to 60s azoxlpf 2025-10-20 13:54:22 +02:00
  • cbd218fd0c feat(schtask_as): improve ADCS certificate handling and PFX retrieval azoxlpf 2025-10-17 16:50:36 +02:00
  • c77130298e Merge branch 'main' into module-usercredman tiagomanunes 2025-10-17 15:01:14 +02:00
  • 3d407b47a4 Merge pull request #961 from Pennyw0rth/neff-fix-winrm-ps-output Alex 2025-10-17 08:46:19 -04:00
  • 0da48a35a4 Improve code for printing the PS streams Alexander Neff 2025-10-17 07:59:03 -04:00
  • b232520362 Fix winrm output when executing powershell Alexander Neff 2025-10-15 10:42:03 -04:00
  • 88affc91fa Merge branch 'main' into module-usercredman tiagomanunes 2025-10-13 18:23:16 +02:00
  • 136b45cf28 Merge pull request #957 from Pennyw0rth/neff-fix-winrm-errors Alex 2025-10-13 08:40:40 -04:00
  • 4d637bcdaf Remove unused import Alexander Neff 2025-10-13 08:36:49 -04:00
  • 594c3b9f75 Add stderr printing to winrm execution Alexander Neff 2025-10-13 08:33:25 -04:00
  • ec0ed97f72 Merge branch 'main' into module-usercredman tiagomanunes 2025-10-08 10:50:23 +02:00
  • f981215d77 Merge pull request #952 from Pennyw0rth/neff-fix-bh-stacktrace Alex 2025-10-07 13:41:30 -04:00
  • bc5e842d69 Remove unused returns Alexander Neff 2025-10-07 13:38:18 -04:00
  • d3b324d001 Select correct masterkey based on DPAPI_BLOB metadata Tiago Nunes 2025-10-07 19:37:25 +02:00
  • e22b41d6d0 Catch errors from the bloodhound run Alexander Neff 2025-10-07 13:35:31 -04:00
  • 1ae8c5a148 Also catch NoNameservers Alexander Neff 2025-10-07 13:32:30 -04:00
  • dece6b0177 Catch dns resolver issue when domain can't be resolved Alexander Neff 2025-10-07 13:28:30 -04:00
  • d6650a0db7 Merge branch 'main' into module-usercredman tiagomanunes 2025-10-07 18:56:44 +02:00
  • 1f04ce2feb Merge pull request #951 from Pennyw0rth/neff-fix-backup_operator Alex 2025-10-07 12:41:15 -04:00
  • ad71df8031 Readd removed code Alexander Neff 2025-10-07 12:16:12 -04:00
  • cb3cd3dd7b Merge branch 'main' into module-usercredman tiagomanunes 2025-10-05 19:13:11 +02:00
  • bb668cae65 Merge pull request #857 from Pennyw0rth/neff-add-certipy-find Alex 2025-10-05 11:59:54 -04:00
  • 5c5f19b9fd Merge pull request #946 from Pennyw0rth/neff-fix-#945 Alex 2025-10-05 08:54:55 -04:00
  • ec05735933 Fix copilot solution where smbv1 could not be initialized anymore Alexander Neff 2025-10-04 17:58:00 -04:00
  • 5793ccc778 Fix logic bug where a connection would have been created if there is a timeout Alexander Neff 2025-10-04 17:51:33 -04:00
  • 19ed5d31e1 Integrate SMBv1 setup on first connection into create_conn_obj Alexander Neff 2025-10-04 07:08:40 -04:00
  • 5fe634ddc2 Use SMBv1 in connection info to get hostname from smbv1 Alexander Neff 2025-10-03 17:49:29 -04:00
  • 1800062f31 Merge branch 'main' into module-usercredman tiagomanunes 2025-10-02 16:45:43 +02:00
  • 76961df2fa better handling of RFB 3.3 Joachim De Bats 2025-10-02 10:03:16 +02:00
  • b3c34a931c Update dump-computers.py crosscutsaw 2025-10-01 02:01:26 +03:00
  • f77c6ae8d8 sed Encryption/EncryptionReq Deft_ 2025-09-29 09:46:49 +02:00
  • 8ebd935d11 Add encryption flag in enum_hosts Deft_ 2025-09-28 21:33:14 +02:00
  • b2e97cb973 Merge branch 'main' into mssql_cbt_rework Deft_ 2025-09-28 19:20:08 +02:00
  • 378a8b48bf Comply with Ruff Aurélien CHALOT 2025-09-28 19:17:15 +02:00
  • 2cab05041f Patch so that authent works anytime Aurélien CHALOT 2025-09-28 19:04:46 +02:00
  • 71d7ef0f3f Remove double : typo Aurélien CHALOT 2025-09-28 18:01:08 +02:00
  • 5bbad4e023 Add ChannelBinding computing for MSSQL Aurélien CHALOT 2025-09-28 17:49:25 +02:00
  • 35e9afdbb8 Remove StringIO and remove impackets dump function calls Alexander Neff 2025-09-28 11:21:32 -04:00
  • bedb06a49a Remove StringIO Alexander Neff 2025-09-28 11:20:27 -04:00
  • 800bc5ec5e Merge pull request #938 from Dfte/dedent2 Alex 2025-09-28 09:39:16 -04:00
  • 08bb98d068 Striped Aurélien CHALOT 2025-09-28 15:31:42 +02:00
  • d151912354 Merge pull request #937 from Dfte/dedent Alex 2025-09-28 09:28:48 -04:00
  • 5ef5c7313a Remove unnecessary strip command Alexander Neff 2025-09-28 09:26:16 -04:00
  • 81b724a71e Add dedent for easier reading Aurélien CHALOT 2025-09-28 15:04:04 +02:00
  • d27f1c207c Add exception handling around credential decryption Tiago Nunes 2025-09-28 11:48:42 +02:00
  • c049826c98 Merge branch 'main' into module-usercredman tiagomanunes 2025-09-28 09:45:40 +01:00
  • 08207eef18 Merge pull request #935 from Dfte/ntlmreflection_path Alex 2025-09-27 10:55:20 -04:00
  • 1c77c6496f Typo Alexander Neff 2025-09-26 13:08:52 -04:00
  • c77800b9eb fix typo Aurélien CHALOT 2025-09-26 18:09:32 +02:00
  • f45baf80dd Add modification info Aurélien CHALOT 2025-09-26 17:19:17 +02:00
  • aa5dc329f9 Fix false assumption over smb signing Aurélien CHALOT 2025-09-26 17:06:40 +02:00
  • e2d160bccc fix Ruff violations and normalize indentation azoxlpf 2025-09-26 09:28:19 +02:00
  • f11e848e6e Fix: auto-formatting removed, all edits from nxcdb.py removed danwroy 2025-09-25 20:38:24 -07:00
  • 2c07e1d801 Formatting Alexander Neff 2025-09-25 19:03:13 -04:00
  • 98e86ea33e Merge branch 'main' into winrm_dpapi Alexander Neff 2025-09-25 19:01:38 -04:00
  • 6ba4427701 Merge branch 'main' into feat/raisechild Alex 2025-09-25 18:46:11 -04:00
  • 7de5c48492 Rename module back to certipy-find because this is the only function we want to integrate Alexander Neff 2025-09-24 18:17:10 -04:00
  • db887ac7b3 Fix certipy dependency name Alexander Neff 2025-09-24 18:10:39 -04:00
  • 8f72ddd6ca Add category for certipy-find Alexander Neff 2025-09-24 18:10:21 -04:00
  • 84b59d6c10 Merge branch 'main' into neff-add-certipy-find Alexander Neff 2025-09-24 12:23:02 -04:00
  • 0278b81c3b Merge pull request #932 from joaovarelas/main Alex 2025-09-24 12:17:33 -04:00
  • b2e123417b enum_av module: add checkpoint indicators joaovarelas 2025-09-24 16:44:25 +01:00
  • 32c1a4aff2 Merge pull request #908 from Dfte/schtaskas_certreq Alex 2025-09-23 05:43:33 -04:00
  • 002480462c Formatting Alexander Neff 2025-09-21 12:32:38 -04:00
  • 55f1581c8e Small error message adjustment Alexander Neff 2025-09-21 12:31:12 -04:00
  • 4c256884db Add more flexibility to account for possible attacker time skew and delete task even when erroring Alexander Neff 2025-09-21 12:24:43 -04:00
  • 5a756f1129 Add error output if schtask raises an exception Alexander Neff 2025-09-21 12:23:49 -04:00
  • 9bac586a49 Ensure ca_name arg has the correct format Alexander Neff 2025-09-21 12:23:28 -04:00
  • 7df74b90a5 Merge branch 'main' into schtaskas_certreq Alex 2025-09-21 08:39:00 -04:00
  • 9cf6f59f90 Merge pull request #929 from Dfte/fix_schtask_as Alex 2025-09-21 08:34:15 -04:00
  • 56da9afc63 Merge pull request #919 from Pennyw0rth/neff-allow-kerbroast-computers Alex 2025-09-21 08:28:57 -04:00
  • 4eadf3b5a0 Overall review Aurélien CHALOT 2025-09-21 10:33:08 +02:00
  • f1f0fba2dd Overall review Aurélien CHALOT 2025-09-21 10:28:21 +02:00
  • 509b238fb3 Overall review Aurélien CHALOT 2025-09-21 10:25:50 +02:00
  • 384f362579 Fix missing , Aurélien CHALOT 2025-09-20 21:14:06 +02:00
  • 444e3ddb29 Properly format computer accounts for tgs roasting Alexander Neff 2025-09-19 19:06:26 -04:00
  • 393be37b92 Refactor tgs output Alexander Neff 2025-09-19 14:41:21 -04:00
  • 52858cd750 Ensure format of CA Alexander Neff 2025-09-18 13:33:16 -04:00
  • c689eb0978 Merge pull request #851 from azoxlpf/fix/nxdomain-duplicate-logs Alex 2025-09-18 12:07:40 -04:00
  • 0bc8101eb7 Merge pull request #920 from Pennyw0rth/neff-fixes Alex 2025-09-17 09:47:42 -04:00
  • 4df95b4118 Changed print() statements to new print-only logging method (top-level files only) danwroy 2025-09-17 04:10:53 -07:00
  • f4bd6f8798 Formatting Alexander Neff 2025-09-10 19:11:35 -04:00
  • abd0c83ef7 Cast values to string in case bytes are returned Alexander Neff 2025-09-10 19:07:26 -04:00
  • 3bb18b4ee4 Add error handling for each input target in case the parsing fails for one file Alexander Neff 2025-09-10 19:06:03 -04:00
  • 30c2f23dcf Add SYSVOL share to exclusion list of scuffy Alexander Neff 2025-09-10 19:05:32 -04:00
  • 8ab2073bfb fix(nopac): remove confusing text marshall-kerberos-cache-fixes Marshall Hallenbeck 2025-09-10 13:15:01 -04:00
  • 5b5616a105 Merge branch 'main' into marshall-kerberos-cache-fixes Marshall Hallenbeck 2025-09-10 12:09:26 -05:00
  • e80654f980 Allow roasting computer accounts as well if specified Alexander Neff 2025-09-10 12:49:17 -04:00
  • 027e520824 Merge pull request #912 from Pennyw0rth/marshall-kerberoast-user-list-fix Marshall Hallenbeck 2025-09-10 11:42:27 -05:00