Commit Graph

1020 Commits

Author SHA1 Message Date
0xdeaddood 769c319612 Merge pull request #1188 from SAERXCIT/default-template
Default ADCS template to "Machine" or "User" whether relayed account name ends with "$"
2022-02-08 12:24:05 -03:00
0xdeaddood 09163293a9 Merge pull request #1214 from SAERXCIT/ldaprelay-getadcsenrollmentsvc
LDAP attack: dump ADCS enrollment services and certificate templates info
2022-02-08 12:22:39 -03:00
0xdeaddood d8679837a6 Updated changelog and some script headers 2022-02-01 19:16:45 -03:00
0xdeaddood 99f1b207af Merge pull request #1209 from simondotsh/ms-dssp
Implementation of MS-DSSP with a short example.
2022-02-01 18:51:30 -03:00
0xdeaddood a7095c75cc Merge pull request #1190 from CCob/master
Initial support for raw NTLM relay server
2022-02-01 18:49:32 -03:00
SAERXCIT d7c434dd53 Output principals who can enroll on each enrollment service and template 2021-11-21 12:30:07 +01:00
SAERXCIT d2e981f7f6 Add LDAP Relay to dump ADCS enrollment services info 2021-11-19 16:05:52 +01:00
simondotsh 981eb5bc4a Added missing socket close 2021-11-09 17:54:21 -05:00
simondotsh 85eed9d4dc Added missing new line at the end of files 2021-11-07 16:20:08 -05:00
simondotsh c94ccfa908 Implementation of MS-DSSP with a short example 2021-11-07 16:12:52 -05:00
Roman Maksimov 7aabdb1689 fix indent in addcomputer.py 2021-10-30 23:41:19 +03:00
Shutdown 62b8769c3b Dup fix and file mode changed to 775 2021-10-25 17:47:21 +02:00
0xdeaddood 4229481c26 Merge pull request #1183 from ShutdownRepo/getST-for-kcd-kerberos-only
Added support for a custom additional ticket for S4U2Proxy
2021-10-22 18:28:43 -03:00
0xdeaddood b5599da022 Fixed typos 2021-10-22 18:10:44 -03:00
0xdeaddood b66cd365ff Merge pull request #1108 from ShutdownRepo/rbcd
Added rbcd attack script
2021-10-22 17:14:07 -03:00
Shutdown 4080879f63 Update examples/rbcd.py
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com>
2021-10-22 22:00:28 +02:00
CCob 93fb6ec903 Initial support for raw NTLM relay server for lsarelayx (and other third party relay tools) 2021-10-17 21:22:43 +01:00
SAERXCIT 4edbf1453f Default ADCS template to "Machine" or "User" whether relayed account name ends with "$" 2021-10-15 12:33:29 +02:00
Shutdown 50d1ec9e80 Co-authored-by: GeisericII <g.giacobbe1@outlook.it> 2021-10-15 12:02:37 +02:00
0xdeaddood d5839302a4 Merge pull request #1175 from p0dalirius/fixing_psexec_encodings
Fixes #1079 psexec.py decoding problems on multi bytes characters
2021-10-14 16:18:57 -03:00
0xdeaddood 3ff7e6f229 Merge pull request #1101 from ExAndroidDev/ntlmrelayx-adcs-attack
Implementation of AD CS attack in ntlmrelayx.py
2021-10-14 15:36:33 -03:00
0xdeaddood ff813e457b Merge pull request #1160 from Gifts/master
Implementing reg.py ADD/DELETE functionality
2021-10-14 15:07:38 -03:00
Gifts f40f86e846 Fix argument help to include HKCR (HKEY_CLASSES_ROOT)
Added relevant example to update empty value of Key.
2021-10-14 15:39:13 +03:00
Gifts 8c5eb3f53f Refactoring duplicate code to __strip_root_key function 2021-10-13 19:22:35 +03:00
Shutdown 76f3992655 Added -additional-ticket feature for S4U2Proxy for KCD Kerberos only abuse 2021-10-10 18:47:38 +02:00
p0dalirius d4d60954ae Updated prompt regex
Removed debug comments
2021-10-08 12:18:08 +02:00
p0dalirius e0751ae142 Fixes #1079 psexec.py decoding problems on multi bytes characters, with py2 support 2021-10-03 14:02:18 +02:00
p0dalirius f0a3917d58 Fixes #1079 psexec.py decoding problems on multi bytes characters 2021-10-03 13:26:36 +02:00
Shutdown f2eb3796a3 Small edits to allow RBCD attack from user account 2021-09-29 11:09:44 +02:00
0xdeaddood 9725f5b4b7 Merge branch 'master' into smbpasswd 2021-09-27 16:13:08 -03:00
Sam Free5ide 65663921b2 Refactor target string parsing 2021-09-25 15:47:52 +03:00
snovvcrash dc2119ec3c Update header format
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com>
2021-09-25 15:35:53 +03:00
snovvcrash 71b5da37ac Update header format
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com>
2021-09-25 15:35:44 +03:00
snovvcrash a3bc8422de Update header format
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com>
2021-09-25 15:35:32 +03:00
snovvcrash a3eaab5723 Update header format
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com>
2021-09-25 15:35:18 +03:00
Gifts cb84aaa28e Implementing reg.py DELETE functionality. 2021-09-22 21:12:47 +03:00
Gifts c588e99e9c Implementing reg.py ADD functionality in order to be able to modify remote registry.
Currently, modification of (Default) key is not implemented.
2021-09-22 15:46:33 +03:00
Martin Gallo f057477633 Removed some deprecation warnings (#1157)
* Fixed warnings related to threading, that will start to appear in Pyhton 3.10, see https://docs.python.org/3.10/whatsnew/3.10.html#deprecated
* Fixed warnings related to unrecognized escape sequences, see https://docs.python.org/3/reference/lexical_analysis.html#string-and-bytes-literals
2021-09-21 15:11:27 -03:00
exploide ee86a6d606 getST.py: fixed wrong example in usage output 2021-09-13 12:20:23 +02:00
Sam Free5ide 8f67e44bfa Add more 'password expired' exception checks 2021-07-30 16:42:41 +03:00
ExAndroidDev 5f1ced6d91 Merge branch 'master' into ntlmrelayx-adcs-attack 2021-07-27 16:38:08 +02:00
0xdeaddood 1636eaab69 dpapi.py: Updated description and copyright year. 2021-07-26 18:01:01 -03:00
Martin Gallo cd4fe47cfc Arrange tagline, copyright and license notes across all source files
This was a pending change to:
- Use the same tagline, copyright and license notice across files.
- Remove authors' contacts that are no longer valid (due to affiliation changes).
- Update repository location.
- Update license file with missing licenses (althought those were already in source files).

This doesn't include any change on the source code, nor any change on current copyright or licenses. Just formatting and phrasing to make our and distro's maintainers life easier.
2021-07-20 10:04:27 -03:00
Sam Free5ide e4483d4625 Fix options parsing for a local account 2021-07-09 21:00:54 +03:00
Sam Free5ide 8a344ff2cd Allow to use NTLM hashes as a new password value 2021-07-09 16:11:58 +03:00
Shutdown b08473b7a2 Added rbcd attack script 2021-06-29 17:54:21 +02:00
0xdeaddood 142cacb649 Merge pull request #1074 from franferrax/master
WMI objects minor refactors, fixes, and offline parsing tests
2021-06-29 12:35:13 -03:00
ExAndroidDev 81afc66904 AD CS relay attack implementation 2021-06-22 21:42:26 +02:00
Francisco Ferrari Bihurriet a9e7b647b2 Revert #1069 fix
As explained in f9514ee36d, #1069 fix is no longer needed after b1499ae822 & bc57bf7404 changes
2021-06-09 13:00:17 -03:00
0xdeaddood 25c62f65a4 Merge pull request #1088 from SecureAuthCorp/pr-605-catchup
Add silent command
2021-05-28 19:52:32 -03:00