h00die
8beb6255cb
fix spelling in aux modules
2024-01-07 15:02:53 -05:00
Ashley Donaldson
2ead152173
Add specific module to perform ASREP-roasting
2023-11-24 07:43:49 +11:00
Spencer McIntyre
5dee288464
Stream LDAP query results
2023-08-14 16:14:36 -04:00
Grant Willcox
f6bfa6a61b
Add in SCHANNEL support, and update modules to fix a hang when using to_json instead of get_operation_result.
2023-02-24 13:50:04 -06:00
Grant Willcox
71aa4bdace
Update ldap_query with find_schema_dn function to find the schema DN which may not be the same as the base DN so we can query security attributes of entries
2023-01-25 15:19:29 -06:00
bcoles
431804ef15
Fix typos: Replace 'the the' with 'the'
2022-12-04 17:41:24 +11:00
Grant Willcox
79ac775443
Perform updates from code review.
2022-11-04 15:44:28 -05:00
Grant Willcox
8922e5b203
Add in first initial implementation of ESC module and updates to associated libraries.
2022-11-04 15:43:34 -05:00
Spencer McIntyre
fa7d677d45
Consolidate and improve LDAP error handling
2022-10-31 10:56:17 -04:00
Grant Willcox
51829c5ce9
Add in inital copy of ms_dtyp.rb library and use the definitions there to replace our custom unpack solutions with proper BinData approaches. Also rename some variables to use more appropriate names
2022-10-25 11:29:22 -05:00
Grant Willcox
8bc2e647eb
More updates
2022-10-25 10:14:41 -05:00
Grant Willcox
87aa5d5266
Handle attributes with whitespace better. Also handle isSingleValue correctly now for the certificate values we have at the moment
2022-10-25 10:12:37 -05:00
Grant Willcox
42463ac3b6
Rework logic so we can now only query once to retrieve the info on the attributes we are examining, instead of once per entry returned
2022-10-25 10:12:37 -05:00
Grant Willcox
78f5ae47d4
Fix up some improper practices and convert entry_list to a hash
2022-10-25 10:12:36 -05:00
Grant Willcox
a698145334
Add in better coding practices for certain elements n RuboCop the file
2022-10-25 10:12:36 -05:00
Grant Willcox
6682eff259
Add in the data type checker feature for checking the data type of attributes retrieved
2022-10-25 10:12:36 -05:00
Grant Willcox
9bef925e57
Add support for decoding password ages to time strings, Windows timestamps to time strings, and system flags to strings
2022-10-25 10:12:35 -05:00
Grant Willcox
20c07eafe7
Add support for SID decoding
2022-10-25 10:12:35 -05:00
Grant Willcox
93e53e0429
Add in support for GUIDs and certificate handling
2022-10-25 10:12:34 -05:00
Grant Willcox
6b3d3913e7
Update to fix sanitization code due to improper logic
2022-08-30 16:59:30 -05:00
Grant Willcox
76eaa76fb3
Switch over to using Rex::Text.to_hex_ascii to sanitize nonprintable data
2022-08-30 10:32:22 -05:00
Grant Willcox
1b1341a55f
Rubocop code again
2022-08-29 15:50:18 -05:00
Grant Willcox
2261499142
Remove extra debug statement
2022-08-29 15:43:27 -05:00
Grant Willcox
9dcbf55ea8
Update ldap_query logic to handle binary data
2022-08-29 15:34:18 -05:00
Spencer McIntyre
3c495770b8
Allow configuring a base_dn prefix
2022-08-24 15:13:16 -04:00
Grant Willcox
bcd1f63848
Fix logicial error when handing the case where a user did not specify an action at any point and is using the default one
2022-07-27 07:41:40 -05:00
Jeffrey Martin
f779f0f482
consolidate the config directory lookups
...
The user configuration directory can be overridden via environment
variables or configuration files.
In the current implementation `Msf::Config.config_directory` should be
utilized for consistent location reporting. `Msf::Config.get_config_root`
is reserved to generation of a default location and should be considered
`private` as it ignores some injected configuration options. Currently
autoloading does not allow application of the `private` keyword to this method,
requiring guidance during development that module writers should access the
full configured `user` value of `Msf::Config.config_directory`.
2022-07-25 15:27:21 -05:00
Spencer McIntyre
2eaccd657f
Use an OptPath for QUERY_FILE_PATH
...
This adds tab completion and an extra check to make sure it exists.
2022-07-19 09:48:03 -04:00
Grant Willcox
dcd4caf977
Remove excess error handling that was causing issues
2022-07-19 08:10:53 -05:00
Spencer McIntyre
25f50e607c
Reduce code, be more permissive
...
This makes a few changes that should enable the module to function
better should it be dropped into a fresh MSF installation on its own.
2022-07-15 16:29:17 -05:00
Grant Willcox
2a8d95c121
Default to having a near empty custom file so that we can still update the default queries without issues vs preventing updates from occuring. If users want to override the defaults, then they accept the risk of not getting updates. Update documentation to also note this.
2022-07-15 16:29:12 -05:00
Grant Willcox
1e05630d26
Make sure that we load ACTIONs from the user's custom file at startup if they have changed anything or added any new ACTIONs
2022-07-15 16:29:12 -05:00
Grant Willcox
2d1acc0369
Refactor code and also add in proper fail_with error codes where needed. Also fix up module and documentation descriptions to be a bit clearer.
2022-07-15 16:29:01 -05:00
Grant Willcox
03ebbaf2d0
Add in RUN_SINGLE_QUERY and associated options, and then update the code and documentation accordingly. This will allow users to run single queries with associated attribute filters if they want to test out single queries at a time without changing YAML files
2022-07-15 16:29:00 -05:00
Grant Willcox
32e5884589
Update error description to be more helpful when debugging. Also update DefaultAction to default to first entry in the list or RUN_QUERY_FILE if no other action is available
2022-07-15 16:28:50 -05:00
Grant Willcox
c5f2507ee0
Fix up usage of the word columns where attributes was more appropriate. Also update the multi query logic to match new data format as it was broken before as a result of changes to file format. Finally remove extra parameters that are no longer needed.
2022-07-15 16:28:43 -05:00
Grant Willcox
8c236e789e
Rename files to follow proper format. Add in documentation for examples. Then update code so we use Msf::Config.get_config_root to store the config file that we parse to get the actions outside of a Git tracked location. We will still use the default file to populate this non-git tracked location if its not already populated though.
2022-07-15 16:28:43 -05:00