Commit Graph

29 Commits

Author SHA1 Message Date
Gabriel Gonzalez ae0ec300f8 Techdebt examples bootstrapping v2 (#1928)
* Standardized examples logger init method

* Fixing missing import

* Standardized examples init_ldap_session function #1

* Calling new shared function _ldap3_kerberos_login from example addcomputer

* Removed considering -debug in each example. Now it's handled in utils.

* Standardized EMPTY_LM_HASH in impacket.examples.utils

* Unify parse_identity function (phase 1)

* Standardized parse_identity

* Renamed "_ldap3_kerberos_login" to "ldap3_kerberos_login" (as it is called from outside)

* Standardize "logger" init in regsecrets.py

* Standardized LDAP login into a single function in utils.py:ldap_login
2025-03-26 22:58:39 -03:00
gabrielg5 27e7e7478d Updating copyright banner... 2024-08-28 17:52:57 -03:00
Gabriel Gonzalez 9b4a139405 Updated Copyright to 2023 2023-07-31 11:48:28 -03:00
Gabriel Gonzalez 8799a1a2c4 Update file banners to reflect Fortra ownership 2022-12-14 17:28:23 -03:00
Martin Gallo cd4fe47cfc Arrange tagline, copyright and license notes across all source files
This was a pending change to:
- Use the same tagline, copyright and license notice across files.
- Remove authors' contacts that are no longer valid (due to affiliation changes).
- Update repository location.
- Update license file with missing licenses (althought those were already in source files).

This doesn't include any change on the source code, nor any change on current copyright or licenses. Just formatting and phrasing to make our and distro's maintainers life easier.
2021-07-20 10:04:27 -03:00
0xdeaddood be3d9903a8 Update help section 2021-05-28 19:44:14 -03:00
0xdeaddood d96b838ede Merge branch 'master' into pr-605-catchup
# Conflicts:
#	examples/dcomexec.py
#	examples/wmiexec.py
2021-05-27 17:01:01 -03:00
Yaroslav Kataev fd1d0ea9a6 Merge branch 'master' into user_can_select_comversion 2021-04-26 08:20:43 +05:00
Yaroslav Kataev 1ab0aa40a6 Update examples/dcomexec.py
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com>
2021-04-26 07:50:37 +05:00
Yaroslav Kataev df11c391ba Update examples/dcomexec.py
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com>
2021-04-26 07:50:24 +05:00
Martin Gallo adb230256d Refactored the target parsing functions (#1053)
In reviewing #1051 (and related #347) we found out that there's some ugly duplicated code that's better suited for an utils function.

The expected target format is:
`<DOMAIN></USERNAME><:PASSWORD>@HOSTNAME`

This PR:
- Moved target parsing routine to an utils module.
- Added unit tests for the new function.
- Using the new function across example scripts that accept a target.
2021-04-22 09:11:33 -03:00
Ярослав Катаев 634ea887e6 User can select comversion #1031 2021-03-22 18:49:40 +05:00
snovvcrash b7a53d8488 Fix PowerShell shell for MMC20 object
Co-authored-by: 0xdeaddood <56035084+0xdeaddood@users.noreply.github.com>
2021-03-13 21:23:06 +03:00
Sam Free5ide 8b0293e174 Add PowerShell option for semi-interactive shells 2021-03-11 20:31:54 +03:00
Eric Missimer 3f80a57a0a Merge remote-tracking branch 'original/master' 2020-09-30 15:46:21 -04:00
Roman Maksimov 896f78df18 convert UTF-8 to lowercase 2020-03-08 02:11:41 +03:00
asolino afe746d2e2 Adding keytab support to secretsdump and remote exec scripts
- Added a loadKeysFromKeytab() class method into keytab.py for easier usage from the scripts.
2020-02-25 15:37:00 -03:00
asolino 8d4c91481b Print Library's installation path by default when -debug is specified 2020-02-05 19:52:39 -03:00
Arseniy Sharoglazov 13885535d7 Added encoding support for dcomexec.py/atexec.py and some improvements for atexec.py 2020-02-05 06:37:41 +03:00
0xdeaddood 0f6713f891 Add the timestamp option to the remote execution scripts 2019-12-18 08:17:41 -03:00
asolino d84b8d32d6 OneCmd returns None, there shouldn't be an output parse
- Should address https://github.com/SecureAuthCorp/impacket/issues/676
2019-09-26 15:21:47 -03:00
Aconite33 e715bac7b4 Required command for options and removed allowing interactive shells. 2019-04-07 13:36:40 +01:00
Aconite33 9057749df1 Added silent function to allow execution of commands without running cmd.exe 2019-04-07 13:19:15 +01:00
asolino 553881b9da Merge branch 'master' into python36 2018-12-05 12:16:54 -03:00
asolino c328de8252 Changing Copyright notice 2018-12-05 12:14:55 -03:00
asolino 512329c54f dcomexec.py port to Python3 2018-10-05 17:32:11 -03:00
asolino 0b28d94832 Using raise the right way + removing print from traceback.print_exc() 2018-05-03 21:21:36 -03:00
asolino ae24770c5a Minor change in description 2018-03-08 16:57:57 -03:00
asolino 882caa0468 Renamed and joined with mmcexec.py, now called dcomexec.py
A similar approach to psexec but executing commands through DCOM.
You can select different objects to be used to execute the commands.
Currently supported objects are:
   1. MMC20.Application (49B2791A-B1AE-4C90-9B8E-E860BA07F889) - Tested Windows 7, Windows 10, Server 2012R2
   2. ShellWindows (9BA05972-F6A8-11CF-A442-00A0C90A8F39) - Tested Windows 7, Windows 10, Server 2012R2
   3. ShellBrowserWindow (C08AFD90-F2A1-11D1-8455-00A0C91F3880) - Tested Windows 10, Server 2012R2

Drawback is it needs DCOM, hence, I have to be able to access DCOM ports at the target machine.

Original discovery by Matt Nelson (@enigma0x3):
https://enigma0x3.net/2017/01/05/lateral-movement-using-the-mmc20-application-com-object/
https://enigma0x3.net/2017/01/23/lateral-movement-via-dcom-round-2/
2018-03-06 16:54:13 -03:00