trustedsec-CS-Remote-OPs-BOF

admin/trustedsec-CS-Remote-OPs-BOF

Fork 0

mirror of https://github.com/trustedsec/CS-Remote-OPs-BOF synced 2026-06-08 17:56:11 +00:00

Commit Graph

Select branches

Hide Pull Requests

LastPass

Sliver_extensions

main

office_tokens

#10

#11

#12

#13

#14

#17

#19

#21

#23

#24

#25

#26

#27

#28

#29

#3

#30

#31

#32

#33

#34

#35

#36

#37

#40

#41

#42

#43

#43

#44

#44

#45

#45

#46

#47

#48

#50

#51

#52

#53

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#63

#64

#64

#7

#8

#9

Build_2025-11-10_19-15

Build_2025-11-20_21-59

Build_2025-11-25_15-59

Build_2026-01-05_22-41

Build_2026-01-05_22-42

Build_2026-01-06_15-17

Build_2026-02-23_22-18

Build_2026-03-05_22-16

f2898e6698 Merge branch 'reg_set' main Build_2026-03-05_22-16 christopher.paschen 2026-03-05 16:14:28 -06:00
73a8896e0c Merge branch 'make_token_cert' christopher.paschen 2026-03-05 15:50:08 -06:00
59a6c65f76 update make_token_cert to work if a PFX has a whole chain christopher.paschen 2026-03-05 15:48:58 -06:00
7bd9b08df5 Merge branch 'disableuser' Build_2026-02-23_22-18 christopher.paschen 2026-02-23 16:14:14 -06:00
d951568b99 don't overwrite all the object files that already exist christopher.paschen 2026-02-23 16:14:02 -06:00
51de1cf605 build / include disableuser object files christopher.paschen 2026-02-23 16:11:16 -06:00
6893db2c91 Merge branch 'Readme' christopher.paschen 2026-02-23 16:04:39 -06:00
27cf526a03 update addusertogroup bof christopher.paschen 2026-02-23 16:01:16 -06:00
e0eec1bbcc Merge branch 'addusertogroup' christopher.paschen 2026-02-23 15:58:43 -06:00
f280e1f21a Merge branch 'ghost_task' christopher.paschen 2026-02-23 15:53:27 -06:00
39f6ab21b9 updated ghost_task object file christopher.paschen 2026-02-23 15:53:21 -06:00
7d62339814 update reg_set object files christopher.paschen 2026-02-23 15:41:34 -06:00
31fc2c3644 Merge branch 'main' of github.com:trustedsec/CS-Remote-OPs-BOF christopher.paschen 2026-02-23 15:25:12 -06:00
50045bb90f Update com init to not fail out on mode change christopher.paschen 2026-02-23 14:35:10 -06:00
3a2e87dafb Free the heap allocated data if it is a QWORD chryzsh 2026-02-10 14:03:19 +01:00
ea4df65f67 Clean up RemoteKey and rootkey properly. chryzsh 2026-02-10 13:53:56 +01:00
d9848db5b4 Added NULL check on certificate chryzsh 2026-02-10 12:40:11 +01:00
797cca1627 Close token handle from LogonUserW chryzsh 2026-02-10 12:04:11 +01:00
7de1d54fee Fix time/day variable collision when parsing args chryzsh 2026-02-10 10:48:39 +01:00
d634222e2c Removed all the space formatting regression chryzsh 2026-02-10 09:57:00 +01:00
1a5ad68202 Update README.md BlueFootedBird 2026-01-28 07:59:04 -08:00
03fb9eb70c Update README.md BlueFootedBird 2026-01-28 07:47:36 -08:00
a7780543af Add disableuser BOF Nikos Vourdas 2026-01-25 02:31:51 -06:00
a7e3c06c73 Merge branch 'ask_mfa' Build_2026-01-06_15-17 christopher.paschen 2026-01-06 09:15:22 -06:00
fad885de14 fix merge conflicts and minor updates post review christopher.paschen 2026-01-06 09:14:16 -06:00
f78ed2c98c Merge pull request #51 from nickvourd/patch-3 Build_2026-01-05_22-42 Build_2026-01-05_22-41 freefirex 2026-01-05 16:40:57 -06:00
a5ea90efc0 Merge pull request #52 from nickvourd/patch-4 freefirex 2026-01-05 16:40:16 -06:00
d277c4b919 Update command usage format in README Nikos Vourdas 2025-11-26 01:36:44 -06:00
1d8882ff45 Update usage syntax for service control commands Nikos Vourdas 2025-11-26 01:18:44 -06:00
fe5bcb3f39 Add ask_mfa BOF to request MFA approval via dialog box Nikos Vourdas 2025-11-25 16:27:19 -06:00
8ee8c59611 update schtaskscreate usage with user / pass Build_2025-11-25_15-59 christopher.paschen 2025-11-25 09:57:55 -06:00
27994ce7cd Merge branch 'pull/add_usage' into pulls_nov_24 christopher.paschen 2025-11-25 09:55:27 -06:00
d2d8046518 Merge branch 'pull/fix_schtasksrun' into pulls_nov_24 christopher.paschen 2025-11-25 09:54:27 -06:00
4598a71b6e Merge branch 'pull/schtasks' into pulls_nov_24 christopher.paschen 2025-11-25 09:54:20 -06:00
a9e3d6933c remove else as VUserPassword covers its usage christopher.paschen 2025-11-25 09:51:52 -06:00
b10df29351 Update command table with usage details Nikos Vourdas 2025-11-24 22:45:16 -06:00
41abd198e5 Fix usage command for schtasksrun Nikos Vourdas 2025-11-24 22:43:19 -06:00
eb857199f2 chmod +x make_all.sh Nikos Vourdas 2025-11-23 10:52:19 -06:00
57346386c3 Fix makefile for clipboard to match cna Build_2025-11-20_21-59 freefirex 2025-11-20 15:57:48 -06:00
a644914b46 Correct branch name in build.yml Build_2025-11-10_19-15 christopher.paschen 2025-11-10 13:14:21 -06:00
e0f6199c00 replace .o's with standardized docker build christopher.paschen 2025-11-10 13:12:28 -06:00
9ab2d2d359 Updated schtaskscreate to include option to use password option. Soups71 2025-10-30 19:13:44 -04:00
2752906e73 merge adcs update christopher.paschen 2025-10-22 16:01:54 -05:00
ac9a64a916 adcs_request: support embedding a SAN URL Marc André Tanner 2025-09-12 11:15:19 +02:00
c6b64f32b9 adcs_request: reorder SAN creation code Marc André Tanner 2025-09-12 09:43:57 +02:00
2c1cc3cec8 adcs_request: properly align output Marc André Tanner 2025-09-12 10:39:50 +02:00
876378354b adcs_request: fix standalone/test build Marc André Tanner 2025-09-12 14:50:41 +02:00
12850f1d93 add get_azure_token christopher.paschen 2025-02-26 15:20:42 -06:00
4ff580b190 Update README.md freefirex 2025-01-06 11:05:17 -06:00
18487840b3 Merge branch 'main' of github.com:trustedsec/CS-Remote-OPs-BOF christopher.paschen 2025-01-02 16:52:52 -06:00
a16e22834a Merge branch 'get_priv' christopher.paschen 2025-01-02 16:52:40 -06:00
104ff2976d adding trustedsec compile of updated get_priv christopher.paschen 2025-01-02 16:52:22 -06:00
38e5d6432c Merge pull request #37 from MEhrn00/lastpass-x86-fix freefirex 2025-01-02 16:24:43 -06:00
d40bcde8bc Change 'bytesRead' type error in lastpass BOF Matt Ehrnschwender 2024-12-30 13:27:59 -05:00
3b513e93b5 add in compiled bofs christopher.paschen 2024-11-22 17:11:49 -06:00
bc3b991c1e Fix password provided to make_token_cert was not used. Gijs Hollestelle 2024-11-22 12:56:39 +01:00
bc0cdd7997 Merge branch 'make_token_cert' christopher.paschen 2024-11-18 10:59:25 -06:00
14919631a4 Release of previously internal make_token_cert christopher.paschen 2024-11-18 10:56:41 -06:00
c352f7ff89 update adcs_request to support dns altnames christopher.paschen 2024-10-18 09:08:37 -05:00
77c37ae0f1 get_priv: include bofdefs and precompiled bofs Eloy Pérez 2024-10-09 12:15:24 +02:00
0d97df0099 get_priv: add option to modify privileges in thread token Eloy Pérez 2024-10-09 10:46:02 +02:00
d21572f407 Merge branch 'main' of https://github.com/trustedsec/CS-Remote-OPs-BOF christopher.paschen 2024-10-07 14:15:50 -05:00
d639f23865 Update to support ESC15 and follow on attack methodology christopher.paschen 2024-10-07 14:13:47 -05:00
4deea898eb Update readme with GlobalUnprotect credits christopher.paschen 2024-09-19 09:44:21 -05:00
3e7bedfe28 adds global_unprotect christopher.paschen 2024-09-13 10:52:46 -05:00
b2611de97c Merge branch 'slack_cookie_patch' christopher.paschen 2024-09-09 16:12:07 -05:00
1749443de4 fix potential off by one and out of bound read christopher.paschen 2024-09-09 16:11:12 -05:00
80a442ef4b Merge branch 'slackKey' christopher.paschen 2024-09-09 15:30:16 -05:00
ff97e237c0 add TS compiled bof's christopher.paschen 2024-09-09 15:27:55 -05:00
3f6c67aff5 Merge branch 'shutdown_bof' christopher.paschen 2024-09-09 14:39:47 -05:00
4b8251e9af revert spacing on all the other changed lines christopher.paschen 2024-09-09 14:39:26 -05:00
f030155591 fix some issues in shutdown pull christopher.paschen 2024-09-09 14:34:20 -05:00
28dd01657e TS builds of object file for pull 29 christopher.paschen 2024-09-09 13:56:12 -05:00
ca77c2fe1d allow cert overwrite christopher.paschen 2024-09-05 15:56:48 -05:00
165ccd9e9b add make_token_cert christopher.paschen 2024-09-03 11:05:03 -05:00
253111f05f add in errorcode under failure Thomas Ring 2024-05-08 10:08:22 -04:00
6ca64d8d7d make check for hostname more robust Thomas Ring 2024-05-08 09:56:29 -04:00
d0bebc2780 fix check on hostname to select proper privilege Thomas Ring 2024-05-08 09:07:41 -04:00
d789f34fd7 add check for target matching beacon hostname and fixing up the hostname back to null if they match Thomas Ring 2024-05-08 08:51:08 -04:00
39af77aa33 cleanup output Thomas Ring 2024-05-08 08:50:36 -04:00
40fcbeb750 patch to enable remote system Thomas Ring 2024-05-08 08:34:02 -04:00
78fbf68907 cleanup help to match existing style. Add checking for invalid reboot/close application setting Thomas Ring 2024-05-08 07:43:29 -04:00
5316c5bfff fine tune message Thomas Ring 2024-05-08 07:25:57 -04:00
62d360e859 update README to reflect new module Thomas Ring 2024-05-08 07:11:49 -04:00
ff82e7af70 add in the mkdir/move Thomas Ring 2024-05-08 07:10:02 -04:00
aa06b1c489 add command to CNA Thomas Ring 2024-05-08 07:01:43 -04:00
776ed4a4fd add bof Thomas Ring 2024-05-07 18:50:00 -04:00
d3890e9b66 add InitiateSystemShutdownExA api Thomas Ring 2024-05-07 18:49:40 -04:00
246f1999d7 Extract slack key to use for offline decryption of cookies xenov 2024-04-02 14:28:26 +00:00
7e0d044879 Added sc_failure to README, and fixed bof_pack for resetPeriod Patrick Benivegna 2024-03-27 16:44:47 -04:00
ba26fdf6a6 hunt for user api tokens in addition to cookies and limit large string output Dan Mayer 2024-02-19 10:43:33 +00:00
e23454d90b Merge pull request #27 from RosettaPwn/RosettaPwn-patch-1 freefirex 2024-02-06 08:01:31 -06:00
0420611ca5 Update Remote.cna RosettaPwn 2024-02-05 16:47:59 -08:00
094b87bc08 Merge branch 'slack_cookie' christopher.paschen 2024-02-02 14:22:34 -06:00
f0ae940fa7 rebuild .o with fedora 34 mingw christopher.paschen 2024-02-02 14:21:17 -06:00
121a3fe7e5 use strnlen and FreeLibrary Tw1sm 2024-02-01 11:45:39 -05:00
e47199dc19 accept ghost_task pull request christopher.paschen 2024-01-31 14:39:10 -06:00
5f76a4fd4e update CheckSystem evi1cg 2023-11-04 06:25:26 +00:00
ab4c4acc85 Add ghost task Ridter 2023-11-03 17:42:44 +08:00
e2d8b058f4 rename to slack_cookie Tw1sm 2023-10-25 20:16:12 -04:00

1 2