Commit Graph

3645 Commits

Author SHA1 Message Date
mpgn 9a38cbcbc0 Update mimikatz.py 2022-04-14 11:16:33 +02:00
0xdeaddood 68fd6b799f Added some checks related to RRP when use-vss option is enabled in secretsdump.py 2022-04-07 16:56:53 -03:00
0xdeaddood 54a3afa9a9 Merge branch 'dpapi-test' into master-Impacket 2022-04-07 12:30:50 -03:00
leandro 25a73ded23 Merge pull request #1203 from w0rmh013/fix_dpapi_entropy
Fixed entropy parameter handling in dpapi.py/unprotect
2022-04-07 12:15:05 -03:00
Martin Gallo e868dba5bc DPAPI: Added some simple tests to blob decryption with and without entropy 2022-04-06 13:52:38 -07:00
0xdeaddood eb28366300 Fixed get_padded_options in ImpactPacket.py
It fixes #1285
2022-03-31 22:49:42 -03:00
Martin Gallo ff32269707 Added a very simple workflow to automatically label new PRs (#1286) 2022-03-23 18:04:07 -03:00
0xdeaddood 1271d369e8 Merge pull request #1276 from SecureAuthCorp/ccache-refactor
CCache refactor
2022-03-11 12:15:50 -03:00
0xdeaddood 6e288da406 CCache: Fixed unit tests on 2.7 so no errrors are thrown
Co-authored-by: Martin Gallo <mgallo@secureauth.com>
2022-03-10 11:51:47 -03:00
0xdeaddood 8251464dd8 Merge branch 'ccache-tests' into ccache-refactor 2022-03-10 11:40:51 -03:00
0xdeaddood 2e9b8e3bd7 Merge branch 'ccache-to-kirbi' into ccache-refactor 2022-03-10 11:37:02 -03:00
0xdeaddood 834557ac54 Merge branch 'master' into ccache-refactor 2022-03-10 11:34:47 -03:00
0xdeaddood 165361a83a Updated copyright year 2022-03-10 11:34:10 -03:00
0xdeaddood 539361973a Merge branch 'remove-duplicate-code' into ccache-refactor 2022-03-10 11:28:06 -03:00
0xdeaddood 5f39724bb0 CCache: Minor changes
- Added NotImplementedError for CCache v1 and v2
- Added backward compatibility
2022-03-10 11:27:48 -03:00
0xdeaddood e8440377e4 Merge branch 'reznok/master' into ccache-refactor 2022-03-10 11:23:36 -03:00
Roman Maksimov 453cec8ed2 add missing TGT value 2022-03-09 21:13:03 +03:00
Roman Maksimov ec8e97f781 set the domain parameter as optional in the parseFile function, add the corresponding docstring 2022-03-09 21:10:48 +03:00
Roman Maksimov 382e7c0981 fix the error message in the loadFile function 2022-03-09 18:03:17 +03:00
Roman Maksimov 2cb6ec7618 add the FileNotFoundError exception 2022-03-09 17:56:25 +03:00
Shutdown 805a0a9908 Fixing Ccache to Kirbi conversion leaving service hostname out 2022-02-20 13:44:34 +01:00
0xdeaddood 6042675a6c Merge pull request #1259 from dirkjanm/patch-1
Remove debug line
2022-02-18 14:09:31 -03:00
Dirk-jan a699aaa765 Remove debug line 2022-02-18 10:38:14 +01:00
0xdeaddood e84b4407cf Merge pull request #1257 from ShutdownRepo/reg-save
Adding save and backup options to reg.py
2022-02-18 02:28:16 -03:00
Martin Gallo 7d2991d788 Merge pull request #1243 from Maltemo/master
Changing corrupted source link
2022-02-17 17:07:51 -03:00
Martin Gallo 3f61baa31b Dropping Python 2.7 support and adjusting doc
* Dropping Python 2.7 support. We're going to run it in GitHub Actions/Tox but only as experimental to have visibility.
* Arranged README and updated installation steps.
* Added latest ChangeLog entries.
* Added tox-gh-actions to simplify workflow.
2022-02-17 09:25:24 -08:00
Shutdown 9fee58daf0 Added a backup method saving SAM SYSTEM and SECURITY "at once"
Co-authored-by: scopedsecurity <zachhanley@gmail.com>
2022-02-17 01:49:48 +01:00
Shutdown ae1903d38b Fixed access denied on SECURITY hive
Co-authored-by: scopedsecurity <zachhanley@gmail.com>
2022-02-17 01:09:11 +01:00
Shutdown cfed931afe Adding save function for Backup Operators to Domain Admin exploitation 2022-02-16 15:18:46 +01:00
Martin Gallo 1c9624c0ff CCache: Added some unit tests
- Parsing v3 and v4 ccache files to check #1106 (and not support for v1 and v2)
- Parsing creds from kirbi to check #1254
- Checking #1166 parseFile function
2022-02-09 11:10:30 -08:00
0xdeaddood ce1017a91c CCache: Modified fromKRBCRED function used to load a Kirbi file
- Added authtime field
- Changed keyvalue type
- It should fix #1056
2022-02-08 22:41:52 -03:00
0xdeaddood 769c319612 Merge pull request #1188 from SAERXCIT/default-template
Default ADCS template to "Machine" or "User" whether relayed account name ends with "$"
2022-02-08 12:24:05 -03:00
0xdeaddood 09163293a9 Merge pull request #1214 from SAERXCIT/ldaprelay-getadcsenrollmentsvc
LDAP attack: dump ADCS enrollment services and certificate templates info
2022-02-08 12:22:39 -03:00
0xdeaddood ed7082cd0b Updated changelog and some script headers. 2022-02-03 15:58:19 -03:00
0xdeaddood 2abda3c8b3 Tests: Added new test cases in MS-PAR and MS-RPRN. 2022-02-03 15:57:57 -03:00
0xdeaddood a67fa60507 Merge pull request #1193 from raithedavion/master
Added "GetDriverDirectory" functions to MS-PAR and MS-RPRN.
2022-02-03 15:14:10 -03:00
raithedavion 71a475c33a Update par.py
Removed ('pcbNeeded', DWORD) from RpcAsyncGetPrinterDriverDirectory definition, and renamed comment on line 403 per the request of 0xdeaddood.
2022-02-03 10:54:05 -07:00
raithedavion 47737303dc Update rprn.py
Removed ('pcbNeeded', DWORD) in RpcGetPrinterDriverDirectory as requested by 0xdeaddood.
2022-02-03 10:52:26 -07:00
0xdeaddood d8679837a6 Updated changelog and some script headers 2022-02-01 19:16:45 -03:00
0xdeaddood 99f1b207af Merge pull request #1209 from simondotsh/ms-dssp
Implementation of MS-DSSP with a short example.
2022-02-01 18:51:30 -03:00
0xdeaddood a7095c75cc Merge pull request #1190 from CCob/master
Initial support for raw NTLM relay server
2022-02-01 18:49:32 -03:00
0xdeaddood badf09d5c5 Merge pull request #1200 from rmaksimov/fix-indent
fix indent in addcomputer.py
2022-01-31 20:04:24 -03:00
Martin Gallo df5a453822 Merge pull request #1247 from SecureAuthCorp/test-refactor
Refactor of testing infrastructure
2022-01-31 13:24:44 -03:00
0xdeaddood ecc3008d3b Tests: some fixes to NRPC tests
- Updated the Netlogon Authenticator computation.
- Modified the authenticate function. Now, the user's machine connects to the server.
- Marked some tests as Xfail due to the Zerologon patch.
2022-01-28 17:17:59 -03:00
Martin Gallo e007046def Removed non-ASCII char that's failing (#1239)
This is failing in Python 2.7 and throwing errors on other version, but wasn't catched but in the new test refactor.
2022-01-28 17:02:56 -03:00
0xdeaddood 0361250ea4 Merge branch 'master_Impacket' into test-refactor 2022-01-28 16:40:17 -03:00
0xdeaddood 7454cb38bd NRPC: Added a function to compute the Netlogon Authenticator at client-side 2022-01-28 16:10:28 -03:00
Maltemo 572fbd4c2d Changing corrupted source link 2022-01-24 17:59:33 +01:00
Martin Gallo 84d254d935 Tests: Make SCMR tests more idempotent (#1238)
- If a previous test run broke, the services was left on the target and thus create calls will fail. Implemented an open or create helper function to solve that.
2022-01-19 14:47:52 -03:00
Martin Gallo 12de27dcc9 NRPC: Fixed NetrLogonControl2(Ex)Response structures (#1235)
- Structures for the `NetrLogonControl2` and `NetrLogonControl2Ex` call responses were using `NETLOGON_CONTROL_DATA_INFORMATION` instead of `NETLOGON_CONTROL_QUERY_INFORMATION`.

Reference: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-nrpc/df7e5dd1-ebcc-4754-9da0-2e0bded82d29
2022-01-19 10:19:25 -03:00