fbf6f30833
Modified Convert-DNSRecord to return the base64 encoded record for record types not currently handled.
2016-04-27 19:11:49 -04:00
1f90c29429
Added Get-DNSZone and Get-DNSRecord to enumerate AD DNS information.
...
Added Convert-DNSRecord (ported from Michael B. Smith's code at https://raw.githubusercontent.com/mmessano/PowerShell/master/dns-dump.ps1 ) - needs expansion work on record types
2016-04-27 18:42:51 -04:00
68c446b9b9
Changed some property types in Get-ObjectACL
2016-04-25 19:52:39 -04:00
4cedfa1c30
added Request-SPNTicket to request kerberos tickets for specified SPNs
2016-04-24 10:56:07 -04:00
c52f9d712c
For PowerView, added $Searcher.CacheResults = $False to Get-DomainSearcher
...
Added dispose() approach for the following cmdlets:
Get-NetUser, Get-ObjectAcl/Add-ObjectAcl, Get-GUIDMap, Get-NetComputer, Get-ADObject, Get-NetOU, Get-NetSite, Get-NetSubnet, Get-NetGroup, Get-NetGroupMember, Get-DFSshare, Get-NetGPO, Get-NetDomainTrust
2016-04-24 06:57:36 -04:00
7ed5343431
Merge pull request #128 from Meatballs1/fix_groups_xml
...
//Group -> //Groups
2016-04-24 12:17:48 +02:00
c8ff194089
Change ComputerName default to the computer's name
...
Change ComputerName default so Disabled doesn't report error
2016-04-11 11:02:31 +01:00
6daaef2706
//Group -> //Groups
2016-04-03 08:09:33 +01:00
37389e9658
Bug fix in Find-GPOLocation
2016-03-18 06:13:05 -04:00
26a0757612
Added Get-SiteName to find the site a computer is a part of
...
Added -ComputerName parameter to Get-NetGPO to enumerate all GPOs a given computer has applied
Fixed bug in Find-GPOComputerAdmin and added site enumeration for GPO links
2016-03-15 15:13:32 -04:00
dee094a993
Additional error checking in Get-DFSshare
2016-03-11 16:37:14 -05:00
2e1d49db33
Fixed bug with Get-NetGroupMember and computer accounts.
...
samaccounttype enumeration now more accurate.
2016-03-09 20:02:18 -05:00
625705781e
fix for Find-GPOComputerAdmin
2016-03-09 16:23:27 -05:00
2e0197603c
Bug fix for Invoke-EnumerateLocalAdmin
2016-03-09 15:37:38 -05:00
236b16430c
Removed Set-MacAttribute and Copy-ClonedFile
...
Combined Convert-NT4toCanonical and Convert-DomainSimpletoNT4 into Convert-ADName
2016-03-09 15:08:27 -05:00
e029509889
Added New-GPOImmediateTask
2016-03-07 19:17:25 -05:00
a87453eeca
DomainOnly tweak
2016-03-07 02:53:30 -05:00
c883dabf77
Added -DomainOnly flag to Invoke-EnumerateLocalAdmin
2016-03-07 02:50:24 -05:00
1c664758ce
renamed output field for Get-NetLocalGroup API
2016-03-07 02:20:26 -05:00
b4891eb371
Added NetLocalGroupGetMembers enumeration method for Get-NetLocalGroup with the -API flag
...
Fixed threading specification in most threaded functions.
2016-03-07 02:00:00 -05:00
661b11ed3c
Parse DFSv1 PKT
2016-03-07 05:32:36 +00:00
26ca1a922e
Added additional fields to Get-NetLocalGroup results.
2016-03-06 21:47:06 -05:00
46e12414e8
Modified output of Find-GPOLocation to return more object information.
2016-02-28 23:05:28 -05:00
4aea2f12f9
-fixed several bugs in Find-GPOLocation (-GroupName now works properly and Sites returned)
...
-Find-GPOLocation with no arguments now returns all mappings
-fixed parsing issue in Get-NetGPOGroup- names now properly extracted from restricted group templates
2016-02-28 22:30:22 -05:00
aea2eacd2d
Most ldap-based search functions now accept a -Credential argument for querying from non-domain joined machines without a runas
...
Changed several functions to filters, where appropriate.
Get-NetShare, Get-NetSession, Get-NetLoggedOn, Get-NetRDPSession, Invoke-CheckLocalAdminAccess, Get-LastLoggedOn, Get-CachedRDPConnection, Get-NetProcess are now filters, better handle pipeline input, and now return an augmented result object with the queried ComputerName as a field
Replaced RemoteUserName/RemotePassword with -Credential parameter in Get-CachedRDPConnection and Get-NetProcess
modified output object for Get-NetShare to be a proper object
Various bug fixes and better parameter validation
2016-02-11 13:46:45 -05:00
bc7efdf229
Added Find-ManagedSecurityGroups to readme
2015-12-29 14:08:28 +00:00
f645f61607
Sorted the recon.psd1 module import into alphabetical order
2015-12-29 14:04:03 +00:00
2343f43e7c
Added reference to function to powersploit.psd1 and recon.psd1
2015-12-29 13:37:40 +00:00
841150e1c6
Added Find-ManagedSecurityGroups
2015-12-28 17:54:47 +00:00
9f183e3651
Set all module versions to 3.0
...
Also cleaned up some module manifest cruft.
2015-12-18 16:28:03 -08:00
55098d59e9
Removed version numbers from scripts
...
A module should maintain a version number not the individual scripts.
2015-12-16 17:08:58 -08:00
c2a70924e1
Removed all version numbers from scripts
...
Scripts in a module should not be individually versioned. Only the
module should be versioned.
2015-12-16 17:08:57 -08:00
5690b09027
Get-NetDomain now not called if -ComputerName or -ComputerFile are passed for meta functions, in order to prevent failure when running on a non-domain joined machine
...
took out FQDN Pester tests from Recon.tests.ps1 that used $env:userdnsdomain
2015-12-14 19:01:10 -05:00
a336562b70
Added Invoke-DowngradeAccount to set an account to use reversible encryption.
2015-12-11 14:58:07 -05:00
a0b95c36b4
Domain local group query fix.
...
Added ConvertFrom-UACValue to convert binary UAC values to human readable format.
Corrected logic in Set-ADObject.
2015-12-11 10:21:39 -05:00
5fb690518d
Integration of PowerView into ./Recon/
2015-12-03 21:50:45 -05:00
12ce71b9f4
Normalizing all files to ascii encoding
2015-11-04 13:48:27 -05:00
2dd1f5920d
Revert "Normalizing all files to ascii encoding"
...
This reverts commit 5a812ce823
2015-11-04 13:41:36 -05:00
5a812ce823
Normalizing all files to ascii encoding
2015-11-04 13:40:02 -05:00
364dde11e1
Fixing error in script
2014-04-28 20:45:20 -07:00
d085c5b1d7
Fixing formatting
2014-04-16 21:16:02 -07:00
f03ab1444d
Fixing garbage put in by merge
2014-04-16 21:11:34 -07:00
b783b459c1
Merge branch 'master' of https://github.com/mattifestation/PowerSploit
...
Conflicts:
Recon/Get-ComputerDetails.ps1
Recon/Recon.psd1
2014-04-16 21:02:50 -07:00
202e8f4b36
Adding internal recon/privesc privesc functions #40
...
Added the following recon functions written by Joe Bialek
(@JosephBialek):
- Find-4648Logons
- Find-4624Logons
- Find-AppLockerLogs
- Find-PSScriptsInPSAppLog
- Find-RDPClientConnections
- Get-ComputerDetails (Combines all of the above functions into a single
function)
2014-03-16 10:02:37 -04:00
77bcb336e0
Separating out functions & bug fix
...
All info gathering pieces of this script can now be called individually.
Fixed a bug where the user SID wasn't being converted to a username in
the RDP function.
2014-03-02 21:18:28 -08:00
308042f493
Adding Get-ComputerDetails recon script
...
Get-ComputerDetails is a recon script which pulls a variety of useful
information off a computer which might later be useful by an attacker.
This includes:
Logons
AppLocker process start logs
PowerShell logs to find scripts run
RDP Client saved servers
2014-02-20 17:47:27 -08:00
d9ca5357e4
Merge pull request #26 from obscuresec/master
...
Update Invoke-ReverseDnsLookup.ps1
2014-01-30 14:38:50 -08:00
14780a5678
Update Invoke-ReverseDnsLookup.ps1
...
Added pipeline support and verbose statement.
2014-01-30 17:13:25 -05:00
237d362acf
Normalized all scripts to ASCII encoding
2013-11-13 21:01:02 -05:00
c4cd73a9cf
Fix for hostfiles option in powershell 2
2013-11-03 22:48:50 -08:00
Harmj0y