admin/PowerShellMafia-PowerSploit
1
0
Fork 0
mirror of https://github.com/PowerShellMafia/PowerSploit synced 2026-06-08 12:13:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 7964823e3f Added documentation for PowerUp HarmJ0y 2016-12-14 11:53:29 -05:00
  • 5da1774219 updated mkdocs.yml HarmJ0y 2016-12-13 17:23:07 -05:00
  • f00e3fc6c4 Added Set-DomainObjectOwner to modify an object's owner Modified Convert-LDAPProperty to break out sections of ntsecuritydescriptor HarmJ0y 2016-12-13 17:21:10 -05:00
  • f4f5fb1460 Added Set-DomainUserPassword to reset a particular user's password. Reformatted documentation. HarmJ0y 2016-12-13 16:00:28 -05:00
  • 813eab4a39 maybe now? HarmJ0y 2016-12-12 22:18:16 -05:00
  • b78f164440 someday I'll get this right... HarmJ0y 2016-12-12 22:16:44 -05:00
  • 9033f2f544 Another try at getting readthedocs.io working HarmJ0y 2016-12-12 21:58:50 -05:00
  • fb90773639 file extensions are important :) HarmJ0y 2016-12-12 21:38:26 -05:00
  • e956bf440f First commit of mkdocs.yml for readthedocs.io HarmJ0y 2016-12-12 21:16:41 -05:00
  • 0aaa23cd86 first take at platyPS doc generation HarmJ0y 2016-12-12 21:05:08 -05:00
  • 7f10db7827 Added spacing to prep for platyPS doc generation. HarmJ0y 2016-12-12 21:00:43 -05:00
  • 6aca12a956 Typo correction and Recon README.md update HarmJ0y 2016-12-12 20:36:42 -05:00
  • 32bd21e335 bug fix in Get-DomainSearcher HarmJ0y 2016-12-12 19:02:26 -05:00
  • 7c32bf69f3 -Complete ground-up rewrite of PowerView -Lots of function cleanup/code rot removal and standardization -Additional options added to Get-DomainSearcher in order to support new param sets -Expanded parameter validation -XML help format standardized -PSScriptAnalyzer fixups- passes PS script analyzer now! -Nearly all functions should tag custom types to output objectsx -Identity supported by all appropriate functions -Transformed all filters to functions -Expanded the formats for Convert-ADName -Get-SPNTicket returns enc part automatically now, and Hashcat output format added -Write-Verbose/Write-Warning/Throw messages now have the function name tagged in the message -Verb-Domain* functions now all include a -FindOne function to return one result -Get-DomainUserEvent now uses -XPathFilter for a massive speedup -ALL Verb-Domain* (LDAP) functions now return full data objects (no more -FullData). Use -Properties for paring down. -Lots of bug fixes -"Required Dependencies" for each function completed -Fixed logic bugs for -ComputerIdentity in Get-DomainGPO, now enumerates domain-linked GPOs as well -Added -UserIdentity to Get-DomainGPO to enumerate GPOs applied to a given user identity HarmJ0y 2016-12-12 14:35:05 -05:00
  • eae4695b13 PowerUp update: -Standardized documentation, including adding output object types and required dependencies to all functions -Added Get-ProcessTokenPrivilege to enumerate the current (or remote) process token privileges, replacing Get-CurrentUserTokenGroupSid -Added Enable-Privilege to enable privileges using RtlAdjustPrivilege -Added @enigma0x3's Invoke-WScriptUACBypass function -Renamed Invoke-AllChecks to Invoke-PrivescAudit, added alias mapping -Added tests for Get-ProcessTokenPrivilege, Enable-Privilege, and Invoke-WScriptUACBypass -Renamed helper functions for consistency -Passes PSScriptAnalyzer! HarmJ0y 2016-12-12 14:25:20 -05:00
  • c7985c9bc3 Merge pull request #202 from PowerShellMafia/dev HarmJ0y 2016-12-12 11:09:24 -08:00
  • 863699d97e typo fix for #179 HarmJ0y 2016-12-12 13:49:10 -05:00
  • 031a7561c6 removed Pester test for non-exported Invoke-ThreadedFunction function HarmJ0y 2016-12-12 13:30:07 -05:00
  • 0939af5bb2 fixed little-endian encoding HarmJ0y 2016-12-12 13:17:22 -05:00
  • 422cd612f6 removed Set-MacAttribute Pester tests HarmJ0y 2016-12-12 13:13:29 -05:00
  • aa528b98c7 merge resolution HarmJ0y 2016-12-01 21:40:05 -05:00
  • 76447005f9 Merge pull request #200 from st3r30byt3/patch-2 HarmJ0y 2016-12-01 21:32:47 -05:00
  • 7b49e54eec Updated Get-ExploitableSystem Antonio Quina 2016-12-01 09:19:54 +01:00
  • 2403654410 Revert "Merge pull request #198 from st3r30byt3/patch-1" HarmJ0y 2016-12-01 01:14:19 -05:00
  • 26a891b499 Merge pull request #198 from st3r30byt3/patch-1 HarmJ0y 2016-12-01 01:05:05 -05:00
  • 67dab8651c Merge pull request #187 from Meatballs1/filter_getnetfileservers HarmJ0y 2016-12-01 01:03:38 -05:00
  • 520bf436ce Merge pull request #174 from Meatballs1/securitygroups HarmJ0y 2016-12-01 01:03:11 -05:00
  • b3e742a94e Updated Get-ExploitableSystem Antonio Quina 2016-11-25 10:34:47 +01:00
  • de955ef270 Added Get-GPPAutologon.ps1 Oddvar Moe 2016-11-21 20:16:02 +01:00
  • 926979ad1a Updated to 2.1 20161029 OJ Edition Matt Graeber 2016-11-10 15:46:23 -08:00
  • a70bbe6164 Add disabled and present searches to get-netfileservers Meatballs 2016-11-01 14:11:44 +00:00
  • 8c9c7c84fe Merge pull request #182 from monoxgas/dev HarmJ0y 2016-09-26 17:44:55 -04:00
  • 8e41548e65 Break on ticket capture Nick Landers 2016-09-13 16:59:03 -06:00
  • 5ac6c919dd Service DACL false positive Nick Landers 2016-09-13 15:43:34 -06:00
  • 5e2200bab7 Merge pull request #173 from joncave/user_polling HarmJ0y 2016-09-06 13:45:45 -07:00
  • 01a289e972 Merge pull request #180 from machosec/EncPartParam HarmJ0y 2016-09-06 13:01:45 -07:00
  • 432cc017ba Add the EncPart param to Request-SPNTicket Matan Hart 2016-08-25 12:27:15 +03:00
  • 917a095a81 Modify dependent functions Meatballs 2016-08-13 20:26:29 +01:00
  • 462c6e83cb Retrieve Security groups by default Meatballs 2016-08-13 20:21:23 +01:00
  • 9b365e82b1 Continuously collect output from background threads Jon Cave 2016-08-13 12:05:12 +01:00
  • fda456338f Add a polling mode to Invoke-UserHunter Jon Cave 2016-08-13 12:00:44 +01:00
  • 869badc7f1 Merge pull request #168 from linuz/master HarmJ0y 2016-07-19 12:55:22 -07:00
  • 87630cac63 Added default value to parameter Dennis Maldonado 2016-07-19 10:36:59 -05:00
  • 0cff698b35 Merge branch 'dev' of https://github.com/PowerShellMafia/PowerSploit into dev Harmj0y 2016-07-15 17:35:09 -04:00
  • 038adce56e type Harmj0y 2016-07-15 17:34:23 -04:00
  • b74e515198 Fix for issue #167 Harmj0y 2016-07-15 17:33:04 -04:00
  • 66c93f9317 Updated Invoke-Mimikatz to "2.1 alpha 20160711 (oe.eo) edition" Matt Graeber 2016-07-15 14:28:34 -07:00
  • fee3b4c642 #147 Bugfix: Invoke-Mimikatz Matt Graeber 2016-07-15 14:07:10 -07:00
  • 8d46d02099 Merge pull request #161 from joncave/batnewlines HarmJ0y 2016-07-15 14:14:21 -07:00
  • e6391254d1 Merge pull request #160 from joncave/tokeninfo HarmJ0y 2016-07-15 14:10:29 -07:00
  • 28d118f987 Merge pull request #158 from joncave/groupsxml HarmJ0y 2016-07-15 14:07:42 -07:00
  • 548b8864cf Added ability to specify domain controller to search (-Server parameter) Dennis Maldonado 2016-06-30 08:46:08 -05:00
  • 9596f68274 PowerUp: Remove badly encoded new lines from .bat output Jon Cave 2016-06-30 10:12:27 +02:00
  • 9d2b9d7631 PowerUp: Allocate enough space for TOKEN_GROUPS Jon Cave 2016-06-29 16:23:45 +02:00
  • 325cc849d7 Use correct variable Jon Cave 2016-06-27 17:53:59 +02:00
  • 5a05a024b6 Fix Get-GroupsXML for multiple <Group> tags Jon Cave 2016-06-27 17:52:28 +02:00
  • 81ac124f22 Changed Get-NetGroup and Get-NetGroupMember to search for samaccountname instead of name Harmj0y 2016-06-24 16:51:16 -04:00
  • 3049211f53 Fixed Find-LocalAdminAccess to properly check for the object output from Invoke-CheckLocalAdminAccess...whoops Harmj0y 2016-06-24 16:11:20 -04:00
  • cd1e10b8fd Turned Get-GptTmpl and Get-GroupsXML into filters Harmj0y 2016-06-24 16:07:26 -04:00
  • ac42eb8a69 Merge pull request #157 from Meatballs1/localgrouprecursion HarmJ0y 2016-06-24 12:59:41 -07:00
  • 8dea905998 Fixed bug in Get-ModifiablePath that resulted in spaces being expanded to the current directory location Fixed other logic bugs in Get-ModifiablePath Fixed bug in Add-ServiceDacl when the [ServiceProcess.ServiceController] wasn't loaded yet by Get-Service Error handling for Get-CachedGPPPassword Changed some Write-Warnings to Write-Verbose Updated Privesc Pester tests for PowerUp Harmj0y 2016-06-23 17:51:17 -04:00
  • 3585c9b4ac Add missing parenthesis Meatballs 2016-06-21 20:31:28 +01:00
  • 7dfbb059e1 Check class type Recurse if localgroup as well as domaingroup Normalize output values to empty string Meatballs 2016-06-21 20:29:40 +01:00
  • 4b40e8609c Fixed logic bugs in Find-GPOLocation and Find-GPOComputerAdmin Harmj0y 2016-06-14 18:23:52 -04:00
  • 31c2290d5e Fixed some Invoke-MapDomainTrust and Get-NetDomainTrust logic Changed domain/forest Write-Warning's to Write-Verbose Harmj0y 2016-06-12 20:53:36 -04:00
  • 9cd0955c5d Cleaned up Get-NetGroup's logic a bit, removed filtering for primary group ID (i.e. domain users) Modified Get-DomainSID to simplify Changed group determination in Get-NetLocalGroup -API Few optimizations to Find-ForeignUser and Find-ForeignGroup Changed DNS resolution method for Invoke-UserHunter Added 'PowerView.GPOLocalGroup' type to Find-GPOLocation Harmj0y 2016-06-12 19:37:17 -04:00
  • 0f2bd1d7f3 Merge pull request #150 from breenmachine/dev HarmJ0y 2016-06-12 16:17:17 -04:00
  • 8270743fb1 Fixed thread countdown timer in Invoke-ThreadedFunction, wasn't ever killing rogue jobs Stephen Breen 2016-06-11 00:26:40 -04:00
  • c53cd87d8f Fixed LDAP preference for when -ADSPath is passed to Get-NetDomainTrust Fixed Get-DomainSID to allow for a -DomainController parameter Fixed Get-NetDomainTrust logic Harmj0y 2016-06-08 01:35:33 -04:00
  • b5172c2bef Fixed a few GC bugs in Get-DomainSearcher Added attempted gpcfilesyspath resolution to Get-NetGPO Added -ADSPath for Get-NetDomainTrust Harmj0y 2016-06-08 00:44:24 -04:00
  • d37ec66c79 bug fixes/error handling in Get-NetGPOGroup for version 2 Harmj0y 2016-06-07 15:36:39 -04:00
  • 5d7fe6b100 Corrected -Path parameter in Write-ServiceBinary Harmj0y 2016-06-07 13:00:14 -04:00
  • b6306a0d8c Small bug fix in Find-GPOLocation when enumerating all relationships Moved GPOType check to Get-NetGPOGroup Expanded comments and help for GPO location cmdlets Harmj0y 2016-06-06 21:37:36 -04:00
  • da86d76adb updated Privesc.psd1 and README.md Harmj0y 2016-06-06 15:43:01 -04:00
  • 5f8d8b0a10 Addded Get-CachedGPPPassword to PowerUp, based almost entirely on Get-GPPPassword. Added Pester tests for Get-CachedGPPPassword. Harmj0y 2016-06-06 15:37:52 -04:00
  • f6ee5cb92e Rewrote/corrected logic for Get-NetGPOGroup, Find-GPOLocation, and Find-GPOComputerAdmin Rewrote/corrected logic for Find-GPOLocation Added Get-IniContent and rewrote Get-GptTmpl to use Get-IniContent to parse GptTmpl.inf files Rewrote Get-GroupsXML to not resolve SIDs and return the same object type as Get-GptTmpl Harmj0y 2016-06-06 06:21:02 -04:00
  • 5cbe3bac10 Merge pull request #148 from PowerShellMafia/powerup_psreflect HarmJ0y 2016-06-04 19:09:22 -07:00
  • e83cfae798 Get-ModifiablePath now also checks parent folders of files for modification Bug fixes Corrected PowerUp Pester tests Changed 'Path' field to 'ModifiablePath' in 'Get-ModifiablePath' Get-ServiceUnquoted now filters paths through Get-ModifiablePath Harmj0y 2016-06-04 22:06:21 -04:00
  • 4915945292 Renamed Get-RegistryAutoRun to Get-ModifiableRegistryAutoRun Renamed Find-PathHijack to Find-PathDLLHijack Fixed exposed functions in PowerSploit.psd1 Harmj0y 2016-06-04 19:07:28 -04:00
  • 1b359e7875 Overhauled and completed PowerUp/Privesc Pester tests Harmj0y 2016-06-04 17:47:10 -04:00
  • 83d1413acd -Enum specification bug fix -Additional error checking and documentation -OpenProcessToken() call now uses TOKEN_QUERY instead of TOKEN_READ Harmj0y 2016-06-04 17:46:43 -04:00
  • 1f926e7fd6 Added SidAttributes enum, Get-CurrentUserTokenGroupSid now returns an object with SID and attributes fields Harmj0y 2016-06-03 23:37:52 -04:00
  • 09d253f070 Added Get-CurrentUserTokenGroupSid to enumerate all group SIDs the current user is a part of, regardless of being disabled. Replaced 'whoami /groups' local admin + medium integrity check with comparison against Get-CurrentUserTokenGroupSid Harmj0y 2016-06-03 22:43:12 -04:00
  • 9711069b7e -Added ValueFromPipelineByPropertyName to Get-ModifiablePath to parse passed file objects -Service functions now accept just -Name (instead of -Service/-ServiceName) that accepts has ValueFromPipelineByPropertyName set in order to handle service objects on the pipeline -Moved PSReflect signatures to the bottom of the script -Function and help cleanup Harmj0y 2016-06-03 19:03:11 -04:00
  • 8083c1e1bb Updated Privesc README.md and .psd1 to reflect the new PowerUp function names. Harmj0y 2016-06-02 02:14:38 -04:00
  • 3c209ee6b3 -Get-ModifiableFile renamed to Get-ModifiablePath -Get-VulnSchTask renamed to Get-ModifiableScheduledTaskFile -Get-VulnAutoRun renamed Get-RegistryAutoRun -Get-RegAutoLogon renamed Get-RegistryAutoLogon -Find-DLLHijack renamed to Find-ProcessDLLHijack for clarification, code cleaned up, -Process parameter added, output object detail expanded, and help expanded -Removed most of the code from Find-PathHijack, replacing it with Get-ModifiablePath -Cleaned up logic for Write-HijackDll -Expanded help for the registry enumeration cmdlets -Added local user creation options to Write-HijackDll to match Write-ServiceBinary -Increased pause between user creation commands Harmj0y 2016-06-02 02:01:16 -04:00
  • a1ba3876b1 -Help expanded for Invoke-ServiceAbuse -Fixed parameter sets for Write-ServiceBinary and added -Credential and -Service params -Simplified/corrected logic for Install-ServiceBinary -Fixed parameter sets and simplified logic for Restore-ServiceBinary -Added sanity check with Get-ModifiableFile for Install-ServiceBinary -Cleaned up lingering spaces Harmj0y 2016-06-02 00:00:35 -04:00
  • ecc96be81a -Removed Invoke-ServiceStart, Invoke-ServiceStop, Invoke-ServiceEnable, Invoke-ServiceDisable -Renamed Get-ServiceFilePermission to Get-ModifiableServiceFile -Renamed Get-ServicePermission Get-ModifiableService -Integrated PSReflect codebase from @mattifestation -Modified Get-ModifiableFile to enumerate the ACLs for passed file paths, returning the path/permission set/identityreference for each modifable file (instead of opening file for modification) -Added Add-ServiceDacl from @mattifestation to add service Dacls to Get-Service objects -Added Set-ServiceBinPath replace "sc.exe config SERVICE binPath= X" - now modifies using the ChangeServiceConfig Win32 API call -Revamped Test-ServiceDaclPermission to take advantage of Add-ServiceDacl. Service permissions are now matched up against the current user's group memberships and specified permission sets to check for. -Functions that checked for service restarting now use Test-ServiceDaclPermission -Get-ModifiableService now uses Test-ServiceDaclPermission -Invoke-ServiceAbuse completely rebuilt to use native PowerShell functions and Set-ServiceBinPath to reconfiguring service binary paths for abuse -Parameter sets rewritten for several functions to accept -Credential objects were applicable and -Service objects from Get-Service on the pipeline Harmj0y 2016-06-01 19:03:18 -04:00
  • 5660218b38 Bug fix for Get-System for when a needed assembly isn't loaded. Harmj0y 2016-05-31 23:28:19 -04:00
  • 5b94a98dbd Merge branch 'dev' of https://github.com/PowerShellMafia/PowerSploit into dev Harmj0y 2016-05-31 23:19:18 -04:00
  • 848f7d31ce Corrected error checking for functions that used GetLastError General errors are now parsed with [ComponentModel.Win32Exception] and written with Write-Verbose Write-Debug calls converted to Write-Verbose or removed Harmj0y 2016-05-31 23:14:05 -04:00
  • 235dec56ae Merge remote-tracking branch 'refs/remotes/origin/master' into dev Matt Graeber 2016-05-29 08:00:08 -07:00
  • 262a260865 Merge pull request #132 from pyllyukko/sch_hourly Matt Graeber 2016-05-29 07:57:30 -07:00
  • 6b0ada999a Fixed FreeLibrary function signature #146 Matt Graeber 2016-05-29 07:54:50 -07:00
  • 83305c5243 Combined Get-SiteListPassword.ps1 into PowerUp.ps1 Harmj0y 2016-05-23 18:51:44 -04:00
  • c30c682797 Bug fix for issue #137 Harmj0y 2016-05-23 18:36:46 -04:00
  • d0b21c0848 Updated functions in Recon.psd1 Harmj0y 2016-05-22 14:41:05 -04:00
  • df2f92899a -Fixed bug in Get-NetGroupMember's ranged searching logic on PowerShell v3+ -Corrected parameter/variable scoping bug in several functions -TODO: fix begin{} scoping issues in Find-InterestingFile, Invoke-UserHunter, Invoke-ProcessHunter, Invoke-EventHunter, Invoke-ShareFinder, Invoke-FileFinder, Find-LocalAdminAccess, Invoke-EnumerateLocalAdmin -Other misc. fixes Harmj0y 2016-05-22 14:40:40 -04:00
  • b568271d57 Get-LoggedOnLocal now handles the situation when multiple SIDs are returned Get-LoggedOnLocal turned into a filter and given additional error handling Standardized tab/line spacing Removed Invoke-PSLoggedOn Harmj0y 2016-05-22 14:07:37 -04:00
  • 2e6c9392c9 Merge pull request #133 from breakersall/dev HarmJ0y 2016-05-22 14:02:49 -04:00