fefc3cb73c
Show names for issuance policy OIDs
2024-02-26 17:28:31 -05:00
257ec484c7
Show names for x509 OID constants
2024-02-22 17:36:30 -05:00
b2f847706f
Update vmware_vcenter_vmdir_auth_bypass.rb
...
Few more instances corrected
2023-10-12 19:08:51 +02:00
060dc84c18
corrected options confict between module and ldap mixin
2023-10-12 16:52:57 +02:00
e3823691a1
Add module for AD CS template CRUD operations
2023-05-22 10:28:58 -04:00
f6bfa6a61b
Add in SCHANNEL support, and update modules to fix a hang when using to_json instead of get_operation_result.
2023-02-24 13:50:04 -06:00
eff9a16e00
Use the access mask data type
...
Also switch from bit16 to uint16 so it's little endian.
2022-11-14 12:27:38 -05:00
52197f544f
Print the added account SID
2022-10-31 10:56:17 -04:00
b00f706c0b
Handle missing accounts when resolving SIDs
2022-10-31 10:56:17 -04:00
af9e4f0fa9
Update how sAMAccountName is looked up.
...
This tweaks how the objects are looked up by the sAMAccountName field.
The sAMAccountName can contain values not ending in $, so lookup what the
user specified first, and then check with the $ suffix if it's not
found.
2022-10-31 10:56:17 -04:00
fa7d677d45
Consolidate and improve LDAP error handling
2022-10-31 10:56:17 -04:00
2269fec099
Initial working RBCD module
2022-10-31 10:56:17 -04:00
b0743e15d9
Update documentation and fix vulnarable/non-vulnerable status message
2022-01-12 16:51:40 +01:00
eaed5d30c7
Allow authenticated user creation
2021-09-10 12:42:20 +02:00
5b3fde7735
Rubocop recently landed modules
2021-02-16 15:08:08 +00:00
f601c49ba9
Default to LDAPS in vCenter Server vmdir modules
2020-07-22 15:40:10 -05:00
f736b0192f
Add LDAPS support and update vCenter vmdir modules
2020-07-22 14:23:00 -05:00
5f5a2e7508
Refactor code (untested)
2020-07-21 01:09:46 -05:00
06f9099d7f
Add BASE_DN and ROOT_KEY to vmdir and Salt modules
2020-05-22 11:16:58 -05:00
00b28da98c
Move username and password check to top of run
...
Check the options first, since they're unrequired. Missed this.
2020-04-22 20:36:27 -05:00
ef68c66d31
Persist base_dn value, since the code is stable
...
I wasn't sure before. We should be able to rely on @base_dn doing the
right thing now. There is no need to check the value every time.
Practically, I think the base DN will always be dc=vsphere,dc=local.
2020-04-22 17:38:12 -05:00
0c0de73afa
Reformat post-RuboCop code, mostly to 80 columns
...
Now with more horizontal space!
2020-04-22 17:38:12 -05:00
0dc6ac7133
RuboCop for the RuboCop gods
2020-04-22 17:38:12 -05:00
b810f44fde
Remove ill-fated VMware advice
2020-04-22 17:38:12 -05:00
676ab353ff
Rename aux/gather/vmware_vcenter_vmdir{,_ldap}
2020-04-22 17:38:12 -05:00
0bacda8117
Use auxiliary/gather/vmware_vcenter_vmdir as check
2020-04-22 17:38:12 -05:00
9633f5daf4
Exploit an LDAP auth bypass to add an admin user
...
Thanks to JJ Lehmann and Ofri Ziv of Guardicore Labs for their work.
https://www.guardicore.com/2020/04/pwning-vmware-vcenter-cve-2020-3952/
2020-04-22 17:38:11 -05:00
Spencer McIntyre