0xdeaddood
769c319612
Merge pull request #1188 from SAERXCIT/default-template
...
Default ADCS template to "Machine" or "User" whether relayed account name ends with "$"
2022-02-08 12:24:05 -03:00
0xdeaddood
09163293a9
Merge pull request #1214 from SAERXCIT/ldaprelay-getadcsenrollmentsvc
...
LDAP attack: dump ADCS enrollment services and certificate templates info
2022-02-08 12:22:39 -03:00
0xdeaddood
d8679837a6
Updated changelog and some script headers
2022-02-01 19:16:45 -03:00
0xdeaddood
99f1b207af
Merge pull request #1209 from simondotsh/ms-dssp
...
Implementation of MS-DSSP with a short example.
2022-02-01 18:51:30 -03:00
0xdeaddood
a7095c75cc
Merge pull request #1190 from CCob/master
...
Initial support for raw NTLM relay server
2022-02-01 18:49:32 -03:00
SAERXCIT
d7c434dd53
Output principals who can enroll on each enrollment service and template
2021-11-21 12:30:07 +01:00
SAERXCIT
d2e981f7f6
Add LDAP Relay to dump ADCS enrollment services info
2021-11-19 16:05:52 +01:00
simondotsh
981eb5bc4a
Added missing socket close
2021-11-09 17:54:21 -05:00
simondotsh
85eed9d4dc
Added missing new line at the end of files
2021-11-07 16:20:08 -05:00
simondotsh
c94ccfa908
Implementation of MS-DSSP with a short example
2021-11-07 16:12:52 -05:00
Roman Maksimov
7aabdb1689
fix indent in addcomputer.py
2021-10-30 23:41:19 +03:00
Shutdown
62b8769c3b
Dup fix and file mode changed to 775
2021-10-25 17:47:21 +02:00
0xdeaddood
4229481c26
Merge pull request #1183 from ShutdownRepo/getST-for-kcd-kerberos-only
...
Added support for a custom additional ticket for S4U2Proxy
2021-10-22 18:28:43 -03:00
0xdeaddood
b5599da022
Fixed typos
2021-10-22 18:10:44 -03:00
0xdeaddood
b66cd365ff
Merge pull request #1108 from ShutdownRepo/rbcd
...
Added rbcd attack script
2021-10-22 17:14:07 -03:00
Shutdown
4080879f63
Update examples/rbcd.py
...
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com >
2021-10-22 22:00:28 +02:00
CCob
93fb6ec903
Initial support for raw NTLM relay server for lsarelayx (and other third party relay tools)
2021-10-17 21:22:43 +01:00
SAERXCIT
4edbf1453f
Default ADCS template to "Machine" or "User" whether relayed account name ends with "$"
2021-10-15 12:33:29 +02:00
Shutdown
50d1ec9e80
Co-authored-by: GeisericII <g.giacobbe1@outlook.it>
2021-10-15 12:02:37 +02:00
0xdeaddood
d5839302a4
Merge pull request #1175 from p0dalirius/fixing_psexec_encodings
...
Fixes #1079 psexec.py decoding problems on multi bytes characters
2021-10-14 16:18:57 -03:00
0xdeaddood
3ff7e6f229
Merge pull request #1101 from ExAndroidDev/ntlmrelayx-adcs-attack
...
Implementation of AD CS attack in ntlmrelayx.py
2021-10-14 15:36:33 -03:00
0xdeaddood
ff813e457b
Merge pull request #1160 from Gifts/master
...
Implementing reg.py ADD/DELETE functionality
2021-10-14 15:07:38 -03:00
Gifts
f40f86e846
Fix argument help to include HKCR (HKEY_CLASSES_ROOT)
...
Added relevant example to update empty value of Key.
2021-10-14 15:39:13 +03:00
Gifts
8c5eb3f53f
Refactoring duplicate code to __strip_root_key function
2021-10-13 19:22:35 +03:00
Shutdown
76f3992655
Added -additional-ticket feature for S4U2Proxy for KCD Kerberos only abuse
2021-10-10 18:47:38 +02:00
p0dalirius
d4d60954ae
Updated prompt regex
...
Removed debug comments
2021-10-08 12:18:08 +02:00
p0dalirius
e0751ae142
Fixes #1079 psexec.py decoding problems on multi bytes characters, with py2 support
2021-10-03 14:02:18 +02:00
p0dalirius
f0a3917d58
Fixes #1079 psexec.py decoding problems on multi bytes characters
2021-10-03 13:26:36 +02:00
Shutdown
f2eb3796a3
Small edits to allow RBCD attack from user account
2021-09-29 11:09:44 +02:00
0xdeaddood
9725f5b4b7
Merge branch 'master' into smbpasswd
2021-09-27 16:13:08 -03:00
Sam Free5ide
65663921b2
Refactor target string parsing
2021-09-25 15:47:52 +03:00
snovvcrash
dc2119ec3c
Update header format
...
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com >
2021-09-25 15:35:53 +03:00
snovvcrash
71b5da37ac
Update header format
...
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com >
2021-09-25 15:35:44 +03:00
snovvcrash
a3bc8422de
Update header format
...
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com >
2021-09-25 15:35:32 +03:00
snovvcrash
a3eaab5723
Update header format
...
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com >
2021-09-25 15:35:18 +03:00
Gifts
cb84aaa28e
Implementing reg.py DELETE functionality.
2021-09-22 21:12:47 +03:00
Gifts
c588e99e9c
Implementing reg.py ADD functionality in order to be able to modify remote registry.
...
Currently, modification of (Default) key is not implemented.
2021-09-22 15:46:33 +03:00
Martin Gallo
f057477633
Removed some deprecation warnings ( #1157 )
...
* Fixed warnings related to threading, that will start to appear in Pyhton 3.10, see https://docs.python.org/3.10/whatsnew/3.10.html#deprecated
* Fixed warnings related to unrecognized escape sequences, see https://docs.python.org/3/reference/lexical_analysis.html#string-and-bytes-literals
2021-09-21 15:11:27 -03:00
exploide
ee86a6d606
getST.py: fixed wrong example in usage output
2021-09-13 12:20:23 +02:00
Sam Free5ide
8f67e44bfa
Add more 'password expired' exception checks
2021-07-30 16:42:41 +03:00
ExAndroidDev
5f1ced6d91
Merge branch 'master' into ntlmrelayx-adcs-attack
2021-07-27 16:38:08 +02:00
0xdeaddood
1636eaab69
dpapi.py: Updated description and copyright year.
2021-07-26 18:01:01 -03:00
Martin Gallo
cd4fe47cfc
Arrange tagline, copyright and license notes across all source files
...
This was a pending change to:
- Use the same tagline, copyright and license notice across files.
- Remove authors' contacts that are no longer valid (due to affiliation changes).
- Update repository location.
- Update license file with missing licenses (althought those were already in source files).
This doesn't include any change on the source code, nor any change on current copyright or licenses. Just formatting and phrasing to make our and distro's maintainers life easier.
2021-07-20 10:04:27 -03:00
Sam Free5ide
e4483d4625
Fix options parsing for a local account
2021-07-09 21:00:54 +03:00
Sam Free5ide
8a344ff2cd
Allow to use NTLM hashes as a new password value
2021-07-09 16:11:58 +03:00
Shutdown
b08473b7a2
Added rbcd attack script
2021-06-29 17:54:21 +02:00
0xdeaddood
142cacb649
Merge pull request #1074 from franferrax/master
...
WMI objects minor refactors, fixes, and offline parsing tests
2021-06-29 12:35:13 -03:00
ExAndroidDev
81afc66904
AD CS relay attack implementation
2021-06-22 21:42:26 +02:00
Francisco Ferrari Bihurriet
a9e7b647b2
Revert #1069 fix
...
As explained in f9514ee36d , #1069 fix is no longer needed after b1499ae822 & bc57bf7404 changes
2021-06-09 13:00:17 -03:00
0xdeaddood
25c62f65a4
Merge pull request #1088 from SecureAuthCorp/pr-605-catchup
...
Add silent command
2021-05-28 19:52:32 -03:00