mpgn
9a38cbcbc0
Update mimikatz.py
2022-04-14 11:16:33 +02:00
0xdeaddood
68fd6b799f
Added some checks related to RRP when use-vss option is enabled in secretsdump.py
2022-04-07 16:56:53 -03:00
0xdeaddood
54a3afa9a9
Merge branch 'dpapi-test' into master-Impacket
2022-04-07 12:30:50 -03:00
leandro
25a73ded23
Merge pull request #1203 from w0rmh013/fix_dpapi_entropy
...
Fixed entropy parameter handling in dpapi.py/unprotect
2022-04-07 12:15:05 -03:00
Martin Gallo
e868dba5bc
DPAPI: Added some simple tests to blob decryption with and without entropy
2022-04-06 13:52:38 -07:00
0xdeaddood
eb28366300
Fixed get_padded_options in ImpactPacket.py
...
It fixes #1285
2022-03-31 22:49:42 -03:00
Martin Gallo
ff32269707
Added a very simple workflow to automatically label new PRs ( #1286 )
2022-03-23 18:04:07 -03:00
0xdeaddood
1271d369e8
Merge pull request #1276 from SecureAuthCorp/ccache-refactor
...
CCache refactor
2022-03-11 12:15:50 -03:00
0xdeaddood
6e288da406
CCache: Fixed unit tests on 2.7 so no errrors are thrown
...
Co-authored-by: Martin Gallo <mgallo@secureauth.com >
2022-03-10 11:51:47 -03:00
0xdeaddood
8251464dd8
Merge branch 'ccache-tests' into ccache-refactor
2022-03-10 11:40:51 -03:00
0xdeaddood
2e9b8e3bd7
Merge branch 'ccache-to-kirbi' into ccache-refactor
2022-03-10 11:37:02 -03:00
0xdeaddood
834557ac54
Merge branch 'master' into ccache-refactor
2022-03-10 11:34:47 -03:00
0xdeaddood
165361a83a
Updated copyright year
2022-03-10 11:34:10 -03:00
0xdeaddood
539361973a
Merge branch 'remove-duplicate-code' into ccache-refactor
2022-03-10 11:28:06 -03:00
0xdeaddood
5f39724bb0
CCache: Minor changes
...
- Added NotImplementedError for CCache v1 and v2
- Added backward compatibility
2022-03-10 11:27:48 -03:00
0xdeaddood
e8440377e4
Merge branch 'reznok/master' into ccache-refactor
2022-03-10 11:23:36 -03:00
Roman Maksimov
453cec8ed2
add missing TGT value
2022-03-09 21:13:03 +03:00
Roman Maksimov
ec8e97f781
set the domain parameter as optional in the parseFile function, add the corresponding docstring
2022-03-09 21:10:48 +03:00
Roman Maksimov
382e7c0981
fix the error message in the loadFile function
2022-03-09 18:03:17 +03:00
Roman Maksimov
2cb6ec7618
add the FileNotFoundError exception
2022-03-09 17:56:25 +03:00
Shutdown
805a0a9908
Fixing Ccache to Kirbi conversion leaving service hostname out
2022-02-20 13:44:34 +01:00
0xdeaddood
6042675a6c
Merge pull request #1259 from dirkjanm/patch-1
...
Remove debug line
2022-02-18 14:09:31 -03:00
Dirk-jan
a699aaa765
Remove debug line
2022-02-18 10:38:14 +01:00
0xdeaddood
e84b4407cf
Merge pull request #1257 from ShutdownRepo/reg-save
...
Adding save and backup options to reg.py
2022-02-18 02:28:16 -03:00
Martin Gallo
7d2991d788
Merge pull request #1243 from Maltemo/master
...
Changing corrupted source link
2022-02-17 17:07:51 -03:00
Martin Gallo
3f61baa31b
Dropping Python 2.7 support and adjusting doc
...
* Dropping Python 2.7 support. We're going to run it in GitHub Actions/Tox but only as experimental to have visibility.
* Arranged README and updated installation steps.
* Added latest ChangeLog entries.
* Added tox-gh-actions to simplify workflow.
2022-02-17 09:25:24 -08:00
Shutdown
9fee58daf0
Added a backup method saving SAM SYSTEM and SECURITY "at once"
...
Co-authored-by: scopedsecurity <zachhanley@gmail.com >
2022-02-17 01:49:48 +01:00
Shutdown
ae1903d38b
Fixed access denied on SECURITY hive
...
Co-authored-by: scopedsecurity <zachhanley@gmail.com >
2022-02-17 01:09:11 +01:00
Shutdown
cfed931afe
Adding save function for Backup Operators to Domain Admin exploitation
2022-02-16 15:18:46 +01:00
Martin Gallo
1c9624c0ff
CCache: Added some unit tests
...
- Parsing v3 and v4 ccache files to check #1106 (and not support for v1 and v2)
- Parsing creds from kirbi to check #1254
- Checking #1166 parseFile function
2022-02-09 11:10:30 -08:00
0xdeaddood
ce1017a91c
CCache: Modified fromKRBCRED function used to load a Kirbi file
...
- Added authtime field
- Changed keyvalue type
- It should fix #1056
2022-02-08 22:41:52 -03:00
0xdeaddood
769c319612
Merge pull request #1188 from SAERXCIT/default-template
...
Default ADCS template to "Machine" or "User" whether relayed account name ends with "$"
2022-02-08 12:24:05 -03:00
0xdeaddood
09163293a9
Merge pull request #1214 from SAERXCIT/ldaprelay-getadcsenrollmentsvc
...
LDAP attack: dump ADCS enrollment services and certificate templates info
2022-02-08 12:22:39 -03:00
0xdeaddood
ed7082cd0b
Updated changelog and some script headers.
2022-02-03 15:58:19 -03:00
0xdeaddood
2abda3c8b3
Tests: Added new test cases in MS-PAR and MS-RPRN.
2022-02-03 15:57:57 -03:00
0xdeaddood
a67fa60507
Merge pull request #1193 from raithedavion/master
...
Added "GetDriverDirectory" functions to MS-PAR and MS-RPRN.
2022-02-03 15:14:10 -03:00
raithedavion
71a475c33a
Update par.py
...
Removed ('pcbNeeded', DWORD) from RpcAsyncGetPrinterDriverDirectory definition, and renamed comment on line 403 per the request of 0xdeaddood.
2022-02-03 10:54:05 -07:00
raithedavion
47737303dc
Update rprn.py
...
Removed ('pcbNeeded', DWORD) in RpcGetPrinterDriverDirectory as requested by 0xdeaddood.
2022-02-03 10:52:26 -07:00
0xdeaddood
d8679837a6
Updated changelog and some script headers
2022-02-01 19:16:45 -03:00
0xdeaddood
99f1b207af
Merge pull request #1209 from simondotsh/ms-dssp
...
Implementation of MS-DSSP with a short example.
2022-02-01 18:51:30 -03:00
0xdeaddood
a7095c75cc
Merge pull request #1190 from CCob/master
...
Initial support for raw NTLM relay server
2022-02-01 18:49:32 -03:00
0xdeaddood
badf09d5c5
Merge pull request #1200 from rmaksimov/fix-indent
...
fix indent in addcomputer.py
2022-01-31 20:04:24 -03:00
Martin Gallo
df5a453822
Merge pull request #1247 from SecureAuthCorp/test-refactor
...
Refactor of testing infrastructure
2022-01-31 13:24:44 -03:00
0xdeaddood
ecc3008d3b
Tests: some fixes to NRPC tests
...
- Updated the Netlogon Authenticator computation.
- Modified the authenticate function. Now, the user's machine connects to the server.
- Marked some tests as Xfail due to the Zerologon patch.
2022-01-28 17:17:59 -03:00
Martin Gallo
e007046def
Removed non-ASCII char that's failing ( #1239 )
...
This is failing in Python 2.7 and throwing errors on other version, but wasn't catched but in the new test refactor.
2022-01-28 17:02:56 -03:00
0xdeaddood
0361250ea4
Merge branch 'master_Impacket' into test-refactor
2022-01-28 16:40:17 -03:00
0xdeaddood
7454cb38bd
NRPC: Added a function to compute the Netlogon Authenticator at client-side
2022-01-28 16:10:28 -03:00
Maltemo
572fbd4c2d
Changing corrupted source link
2022-01-24 17:59:33 +01:00
Martin Gallo
84d254d935
Tests: Make SCMR tests more idempotent ( #1238 )
...
- If a previous test run broke, the services was left on the target and thus create calls will fail. Implemented an open or create helper function to solve that.
2022-01-19 14:47:52 -03:00
Martin Gallo
12de27dcc9
NRPC: Fixed NetrLogonControl2(Ex)Response structures ( #1235 )
...
- Structures for the `NetrLogonControl2` and `NetrLogonControl2Ex` call responses were using `NETLOGON_CONTROL_DATA_INFORMATION` instead of `NETLOGON_CONTROL_QUERY_INFORMATION`.
Reference: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-nrpc/df7e5dd1-ebcc-4754-9da0-2e0bded82d29
2022-01-19 10:19:25 -03:00