7b4becfe72
Added Invoke-UserHunter field to keep output objects in sync.
2016-05-10 00:14:37 -04:00
31ed96d161
Merge pull request #136 from andyrobbins/dev
...
Added name resolution to custom PSObject generated by Invoke-UserHunter.
2016-05-09 21:12:42 -07:00
9f7906280d
Added name resolution to custom PSObject generated by Invoke-UserHunter.
2016-05-10 00:01:38 -04:00
6ada127538
Began adding custom PSObject TypeNames to various PowerView output objects.
2016-05-09 23:22:51 -04:00
26cef85d35
Added Get-RegistryMountedDrive
2016-05-03 22:52:36 -04:00
fbf6f30833
Modified Convert-DNSRecord to return the base64 encoded record for record types not currently handled.
2016-04-27 19:11:49 -04:00
1f90c29429
Added Get-DNSZone and Get-DNSRecord to enumerate AD DNS information.
...
Added Convert-DNSRecord (ported from Michael B. Smith's code at https://raw.githubusercontent.com/mmessano/PowerShell/master/dns-dump.ps1 ) - needs expansion work on record types
2016-04-27 18:42:51 -04:00
68c446b9b9
Changed some property types in Get-ObjectACL
2016-04-25 19:52:39 -04:00
4cedfa1c30
added Request-SPNTicket to request kerberos tickets for specified SPNs
2016-04-24 10:56:07 -04:00
c52f9d712c
For PowerView, added $Searcher.CacheResults = $False to Get-DomainSearcher
...
Added dispose() approach for the following cmdlets:
Get-NetUser, Get-ObjectAcl/Add-ObjectAcl, Get-GUIDMap, Get-NetComputer, Get-ADObject, Get-NetOU, Get-NetSite, Get-NetSubnet, Get-NetGroup, Get-NetGroupMember, Get-DFSshare, Get-NetGPO, Get-NetDomainTrust
2016-04-24 06:57:36 -04:00
7ed5343431
Merge pull request #128 from Meatballs1/fix_groups_xml
...
//Group -> //Groups
2016-04-24 12:17:48 +02:00
69a2cd1e33
Merge pull request #125 from leechristensen/patch-1
...
Change ComputerName default to the computer's name
2016-04-11 11:49:47 -07:00
c8ff194089
Change ComputerName default to the computer's name
...
Change ComputerName default so Disabled doesn't report error
2016-04-11 11:02:31 +01:00
785f4757bd
Merge pull request #122 from joncave/patch-1
...
Find-PathHijack: Expand environment variables in path
2016-04-08 12:59:01 -07:00
6daaef2706
//Group -> //Groups
2016-04-03 08:09:33 +01:00
84b8e1da9a
Find-PathHijack: Expand environment variables in path
...
Paths containing environment variables can cause false-positives to occur, e.g. `%SystemRoot%\system32\WindowsPowerShell\v1.0\`. `Find-PathHijack` will believe this is a relative path and will report it as hijackable if the current directory is writeable.
2016-03-20 21:28:22 +00:00
37389e9658
Bug fix in Find-GPOLocation
2016-03-18 06:13:05 -04:00
26a0757612
Added Get-SiteName to find the site a computer is a part of
...
Added -ComputerName parameter to Get-NetGPO to enumerate all GPOs a given computer has applied
Fixed bug in Find-GPOComputerAdmin and added site enumeration for GPO links
2016-03-15 15:13:32 -04:00
13adf516d5
Moved admin check for Get-System to allow for RevToSelf
2016-03-15 15:13:02 -04:00
6a17f759ab
Added Get-System to Privesc/
...
Added Pester tests for Get-System
2016-03-11 17:45:46 -05:00
dee094a993
Additional error checking in Get-DFSshare
2016-03-11 16:37:14 -05:00
dedd805eaa
Merge pull request #118 from Meatballs1/dfs_v1_pkt
...
Parse DFSv1 PKT
2016-03-11 13:35:14 -08:00
be2a8ecf15
Get-TimedScreenshot enhancement. Issue #114
...
Get-TimedScreenshot now captures the entire screen. The screen
resolution is obtained via WMI. If for some reason that fails, it will
fall back to the old, less ideal method.
2016-03-10 18:00:43 -08:00
f305e31cf5
Bugfix: Invoke-TokenManipulation. Issue #112
...
Fixed the PSv4 dependency for obtaining process ownership information.
Thanks to @mmashwani for suggesting the WMI solution.
2016-03-10 16:48:37 -08:00
2e1d49db33
Fixed bug with Get-NetGroupMember and computer accounts.
...
samaccounttype enumeration now more accurate.
2016-03-09 20:02:18 -05:00
625705781e
fix for Find-GPOComputerAdmin
2016-03-09 16:23:27 -05:00
2e0197603c
Bug fix for Invoke-EnumerateLocalAdmin
2016-03-09 15:37:38 -05:00
236b16430c
Removed Set-MacAttribute and Copy-ClonedFile
...
Combined Convert-NT4toCanonical and Convert-DomainSimpletoNT4 into Convert-ADName
2016-03-09 15:08:27 -05:00
e029509889
Added New-GPOImmediateTask
2016-03-07 19:17:25 -05:00
a87453eeca
DomainOnly tweak
2016-03-07 02:53:30 -05:00
c883dabf77
Added -DomainOnly flag to Invoke-EnumerateLocalAdmin
2016-03-07 02:50:24 -05:00
1c664758ce
renamed output field for Get-NetLocalGroup API
2016-03-07 02:20:26 -05:00
b4891eb371
Added NetLocalGroupGetMembers enumeration method for Get-NetLocalGroup with the -API flag
...
Fixed threading specification in most threaded functions.
2016-03-07 02:00:00 -05:00
661b11ed3c
Parse DFSv1 PKT
2016-03-07 05:32:36 +00:00
26ca1a922e
Added additional fields to Get-NetLocalGroup results.
2016-03-06 21:47:06 -05:00
46e12414e8
Modified output of Find-GPOLocation to return more object information.
2016-02-28 23:05:28 -05:00
4aea2f12f9
-fixed several bugs in Find-GPOLocation (-GroupName now works properly and Sites returned)
...
-Find-GPOLocation with no arguments now returns all mappings
-fixed parsing issue in Get-NetGPOGroup- names now properly extracted from restricted group templates
2016-02-28 22:30:22 -05:00
6de1d78af8
Added Pester tests for Get-SiteListPassword
...
Encrypted password check for Get-SiteListPassword fields
2016-02-12 17:25:13 -05:00
eae5eef91f
Added additional search paths, code cleanup.
2016-02-12 16:26:35 -05:00
2e6b301170
Added Get-SiteListPassword to decrypt McAfee SiteList.xml file passwords.
2016-02-11 21:42:20 -05:00
aea2eacd2d
Most ldap-based search functions now accept a -Credential argument for querying from non-domain joined machines without a runas
...
Changed several functions to filters, where appropriate.
Get-NetShare, Get-NetSession, Get-NetLoggedOn, Get-NetRDPSession, Invoke-CheckLocalAdminAccess, Get-LastLoggedOn, Get-CachedRDPConnection, Get-NetProcess are now filters, better handle pipeline input, and now return an augmented result object with the queried ComputerName as a field
Replaced RemoteUserName/RemotePassword with -Credential parameter in Get-CachedRDPConnection and Get-NetProcess
modified output object for Get-NetShare to be a proper object
Various bug fixes and better parameter validation
2016-02-11 13:46:45 -05:00
1832e324e9
Merge pull request #111 from sagishahar/dev
...
Fix 'Install-ServiceBinary' for non-'Modifiable' files
2016-01-25 15:19:58 -08:00
43c4c69b38
Merge pull request #108 from sagishahar/master
...
Add 'CanRestart' to output and Pester tests
2016-01-25 15:19:20 -08:00
3f1dd34500
Fix 'Install-ServiceBinary' for non-'Modifiable' files
...
The 'Install-ServiceBinary' function fails on an edge case where the
service's file permission does not include the 'Modify' permission but
does include the 'Write' permission
(https://technet.microsoft.com/en-au/library/dd349321(v=ws.10).aspx ). In
this scenario, renaming the original service file for backup purposes
will result in 'Access Denied' message. Fixing this requires that the
file be copied to service.exe.bak instead of renamed to service.exe.bak.
2016-01-17 23:04:27 +08:00
cde9447c5f
Merge pull request #107 from secabstraction/dev
...
new Get-Keystrokes
2016-01-14 12:37:52 -08:00
9cc65e4a85
Fixed Pester/PassThru
2016-01-13 22:32:44 -06:00
75548931ba
Fixed Pester/PassThru
2016-01-13 22:30:38 -06:00
4ffd3084e4
Fixed Pester/PassThru
2016-01-13 22:20:05 -06:00
414daa60b8
Fixed Pester/PassThru
2016-01-13 22:19:06 -06:00
759bd481ae
Fixed Pester/PassThru
2016-01-13 21:02:50 -06:00
Harmj0y