christopher.paschen
ee9459cc4f
update ipconfig to more closely match windows ipconfig
2026-03-10 11:05:44 -05:00
christopher.paschen
2b76c2a4d0
Merge branch 'whoami'
2026-03-05 12:40:35 -06:00
christopher.paschen
48751b16bd
add updated whoami .o files
2026-03-05 12:40:29 -06:00
christopher.paschen
6e12d70dca
Merge branch 'probe_timeout'
2026-03-05 12:38:13 -06:00
christopher.paschen
680146bf7a
update probe .o's with docker build
2026-03-05 12:38:02 -06:00
christopher.paschen
11e90fa80e
update .o from pull request
2026-03-05 12:18:38 -06:00
Tyler Bennett
cd2f4a47d9
sha256 fails to read output and kills implants. After making this change
...
the bof functions as intended
Resources should be released in reverse order of acquisition:
1. Destroy hash objects first
2. Release CSP context
3. Close any file/object handles
2026-03-03 10:38:51 -06:00
Soups71
f64338df16
Adding timeout argument to the probe command.
2026-03-02 19:47:58 -05:00
chryzsh
a0b03ca544
fix: missing DFR for GetLastError
2026-02-24 07:53:03 +01:00
christopher.paschen
6d84587ee5
updated netstat object files
2026-02-23 15:17:03 -06:00
christopher.paschen
679d44b395
Merge branch 'ipv6'
2026-02-23 15:15:12 -06:00
christopher.paschen
1005611ca1
update com to not bail out on mode change
2026-02-23 14:35:44 -06:00
noodle
a83ffa6038
Update SA.cna
2026-02-23 13:19:44 -06:00
christopher.paschen
4649853cf5
accept dnsRecord pull
2026-02-23 13:05:49 -06:00
Soups71
fcd7c8f4f0
Adding IPv6 support and splitting out options
2026-02-22 19:45:48 -05:00
chryzsh
ecf90e546c
whoami: check ConvertSidToStringSidA return in WhoamiUser
2026-02-10 17:52:44 +01:00
chryzsh
c82f89ad05
whoami: fix WhoamiGetTokenInfo resource cleanup and error handling
2026-02-10 17:52:44 +01:00
Marc André Tanner
77a72062b8
ldapsearch: format dnsRecord attribute as base64
2026-01-06 08:25:29 +01:00
christopher.paschen
9aa39fcd9b
Merge branch 'adcs_enum_fix'
2026-01-05 14:27:49 -06:00
christopher.paschen
da97c67fac
unbreak build of most bof's after code merge
2026-01-05 14:26:30 -06:00
christopher.paschen
aa9c515e46
Merge branch 'ldapsecuritycheck'
2026-01-05 14:00:57 -06:00
christopher.paschen
86d40494de
Post code review changes for ldapsecuritycheck
2026-01-05 14:00:39 -06:00
chryzsh
889f277b7c
Fixed issues from code review
2025-11-27 14:21:20 +01:00
Nikos Vourdas
8d2cc5edb7
Modify adcs_enum function to accept domain parameter
2025-11-25 16:46:44 -06:00
christopher.paschen
7dec5d4f80
rebuild md5 / sha1 against standard docker image
2025-11-24 15:51:25 -06:00
Nikos Vourdas
ec65999fac
Add SHA1 BOF
2025-11-23 10:40:29 -06:00
Nikos Vourdas
2e82e30e23
add md5 compiled
2025-11-19 22:11:07 -06:00
Nikos Vourdas
c3bbd03408
Add md5 command to README
2025-11-19 22:08:40 -06:00
Nikos Vourdas
e89469e29f
Update SA.cna
2025-11-19 22:00:42 -06:00
Nikos Vourdas
fbff11acff
Add Makefile for building md5 executables
2025-11-19 21:57:18 -06:00
Nikos Vourdas
4e12d2bc50
Add MD5File function to compute file MD5 hash
2025-11-19 21:55:54 -06:00
christopher.paschen
2e2087f703
update README.md and replace .o's with standardized docker build
2025-11-10 12:29:59 -06:00
christopher.paschen
a8bc8817af
Add github actions build / release of bofs
2025-11-10 12:20:55 -06:00
crusher
accf814f57
Merge branch 'master' into ldapsecuritycheck-feature
2025-10-23 17:00:50 +02:00
Your Name
7f99ac5c4a
Add ldapsecuritycheck BOF with DC-only argument
2025-10-23 16:41:31 +02:00
christopher.paschen
734bc20dc2
Merge branch 'sha'
2025-10-22 15:46:42 -05:00
christopher.paschen
13d1d57b41
update and add compile of sha256
2025-10-22 15:45:10 -05:00
christopher.paschen
8894757b70
add updated build of ldapsearch
2025-10-22 15:28:11 -05:00
christopher.paschen
9a0e223824
Merge branch 'master' into ldap_update
2025-10-22 15:19:12 -05:00
christopher.paschen
d35d1e57d5
Adds get_dpapi_system bof
2025-10-22 12:31:16 -05:00
Your Name
d686237ecb
Added LDAP signing and sealing
2025-10-01 18:43:01 +02:00
Soups71
b366bc6ad7
Added SHA256 for file integrity checks.
2025-09-24 10:37:52 -04:00
christopher.paschen
567bd0b407
bof rebuild from improvements by martanne
2025-09-22 09:30:44 -05:00
christopher.paschen
54d751a7bd
Merge branch 'ldapsearch' into pulls
2025-09-22 09:24:52 -05:00
christopher.paschen
7b2eef18de
Merge branch 'netshares' into pulls
2025-09-22 09:23:12 -05:00
christopher.paschen
0d74744faa
cacls rebuild
2025-09-22 08:56:27 -05:00
Your Name
148875ace5
Fixed OOB error
2025-09-22 14:27:48 +02:00
Marc André Tanner
496da03f02
ldapsearch: use DC hostname instead of IP address for LDAP connection
...
Previously, if no hostname was explictily specified, a domain controller
was automatically discovered and the LDAP connection was established
based on the resolved IP address.
This prevents the use of Kerberos for authentication which is problematic
in hardened environments or when using members of the Protected Users
group for which NTLM is disabled.
2025-09-21 10:44:24 +02:00
Marc André Tanner
2cd445bca3
ldapsearch: fix ordering of informational/debug output
...
Due to the direct use of BeaconPrintf(CALLBACK_OUTPUT, ...) bypassing
the internal buffering, the informational log message was being displayed
out of order.
2025-09-21 10:39:43 +02:00
Marc André Tanner
6bbb508e05
netshares: also display share remark/description
2025-09-12 16:04:25 +02:00
christopher.paschen