f16e2cfb35
Send TGT to WinRM to allow further access of network resources (kerberos double hop)
2022-07-27 16:19:09 +01:00
39f90d95b1
Create sessions for winrm_login successes.
...
Reuses the connection, so that authentication doesn't need to happen again
2022-07-08 16:57:09 +10:00
b2eb348d94
Added WinRM using Kerberos, including encryption
2022-07-07 13:17:09 +10:00
9d8193150f
Allow running a shell command separately to the currently interactive shell
2021-09-21 19:12:49 +10:00
91d0a6cc55
Re-auth after the session times out
...
This seems to happen after 8 hours. WinRM doesn't like having bodies
in the authentication requests, so we force the HTTP client to send
an empty one first
2021-09-17 07:32:18 +10:00
5dceb48553
Fixed rubocop issues
2021-09-13 11:40:03 +10:00
44455fd165
Added some comments for clarity
2021-09-12 19:38:16 +10:00
50e31917da
Emulate a stream to make the base command shell happy
2021-09-10 17:45:08 +10:00
0927737948
Adapted WinRM module logging to MSF logging
...
Separated WinRM module into separate files
2021-09-10 15:54:50 +10:00
b0e1502c86
Implemented suggestions from code review
...
- Use a literal hash
- Comment meaning of NTLM transforms
- store loot with data ready to go, to keep database in sync with file
2021-09-10 08:25:25 +10:00
5cffa86e30
Removed unused code
2021-09-10 07:46:05 +10:00
cf09d56be0
Support re-authentication during the shell
...
After 8 hours, the server requests re-authentication, so need to support that.
2021-09-10 07:41:31 +10:00
9ea3be903d
Just use cmd, as powershell <= 3.0 doesn't actually use stdout/stderr
2021-09-09 22:40:43 +10:00
c33b850ff8
Support terminating processes early by sending a Ctrl+C signal
2021-09-09 22:08:33 +10:00
3acddf75b4
Suggested changes from code review
...
* Report socket info
* Use existing Event class
* Remove debugging prints
* Comment obscure constant
2021-09-08 07:36:59 +10:00
00100f426c
Handle the server ceasing to respond
2021-09-06 23:24:23 +10:00
0e103e8550
Enabled encryption for WinRM when using Negotiate auth
2021-09-06 22:25:34 +10:00
eeef8a3085
Support domain login in WinRM module
2021-09-06 10:25:36 +10:00
7a75a91dc6
Request stdout on a separate thread, so we are alerted when the shell dies.
2021-09-06 09:33:44 +10:00
b50a1aa988
Moved reusable functionality into separate file
2021-09-02 21:58:07 +10:00
Ashley Donaldson