 Quentin Kaiser
|
a17434050c
|
Document each function for easier review.
|
2020-11-09 16:21:08 +01:00 |
|
|
Quentin Kaiser
|
c62a6716c5
|
Remove spaces at EOL.
|
2020-11-09 15:46:13 +01:00 |
|
|
Quentin Kaiser
|
d8f5dc5143
|
IVE definitions are shared by every user running on the same host. I fixed the data structure to reflect that.
|
2020-11-06 16:53:02 +01:00 |
|
|
Quentin Kaiser
|
05fa4b235d
|
Fix vulnerable builds range. Finally supports DPAPI decryption as elevated user. Lots of cleanup to do.
|
2020-11-06 16:00:48 +01:00 |
|
|
Jared Stroud
|
e7e8765473
|
removing spaces EOL
|
2020-11-05 20:54:04 -05:00 |
|
|
Grant Willcox
|
e0209b34c6
|
Apply initial fixes from Adam's review
|
2020-11-05 11:53:38 -06:00 |
|
|
Quentin Kaiser
|
ca3055a009
|
Proper version checks. Comment on future work regarding data left in registy by previous version and dumping when in elevated mode.
|
2020-11-05 13:28:42 +01:00 |
|
|
Quentin Kaiser
|
a800536df2
|
For some reason, the first profile will be stored in connstore.dat while subsequent ones will be stored in connstore.tmp. Note that even if it ends with '.tmp', this file is not temporary. This commit provides support for deployments with multiple VPN connections.
|
2020-11-05 12:41:38 +01:00 |
|
|
Grant Willcox
|
84af718ad9
|
Fix up the fail_with statements as I used the wrong error codes on them
|
2020-11-03 15:20:59 -06:00 |
|
|
Grant Willcox
|
e0a9cbbd8d
|
Fix up several null pointer dereference issues as well as some other locations where we should have called fail_with to properly terminate the program and raise the appropriate messages and status codes
|
2020-11-03 14:51:45 -06:00 |
|
|
Grant Willcox
|
7b72120016
|
Land #14252, Update Avira password gatherer module and associated libaries and add in documentation
|
2020-11-02 14:37:47 -06:00 |
|
|
Grant Willcox
|
46c937089d
|
Fix up regex to properly match on Raw-MD5u only, and fix up refname to be self.refname to fit in with other modules in this directory
|
2020-10-30 12:37:35 -05:00 |
|
|
b4rtik
|
ddd9af83b9
|
Update
|
2020-10-29 22:49:41 +01:00 |
|
|
Quentin Kaiser
|
8750ae5712
|
Add CVE identifier and references to blog post and security advisory from Pulse.
|
2020-10-27 20:12:19 +01:00 |
|
|
Quentin Kaiser
|
d54be7d007
|
Merge branch 'master' into enum_pulsesecure
|
2020-10-27 20:07:25 +01:00 |
|
|
Quentin Kaiser
|
3864f980d3
|
That email address won't be read in the foreseeable future.
|
2020-10-27 20:05:36 +01:00 |
|
|
HuskyHacks
|
3a66984808
|
Update enum_putty_saved_sessions.rb
updating enum_putty_saved_sesssion.rb with additional fields
|
2020-10-25 15:45:33 -04:00 |
|
|
Jared Stroud
|
24c2235c3f
|
Updated w/ fail msg if dump is not created
|
2020-10-23 16:02:52 -04:00 |
|
|
b4rtik
|
9779bbef77
|
Fix parameter managing
Fix a problem running assemblies with Main signature (string[] args) and no passed parameters
|
2020-10-23 21:14:10 +02:00 |
|
|
Jared Stroud
|
6cd4ffeffa
|
removing support for shell from options
|
2020-10-22 20:00:45 -04:00 |
|
|
Jared Stroud
|
9bee758af9
|
Updating execution based on bcoles feedback
|
2020-10-22 19:46:32 -04:00 |
|
|
Jared Stroud
|
ff220946e3
|
Updating loot placeholder to take memdump
|
2020-10-21 23:36:51 -04:00 |
|
|
Jared Stroud
|
cb3e7b326d
|
Updated to store content in loot db
|
2020-10-21 23:10:10 -04:00 |
|
|
Jared Stroud
|
9be68defc7
|
Initial commit of Avast memory dumping post-module
|
2020-10-21 22:58:24 -04:00 |
|
|
h00die
|
39a623f3e0
|
docs for domain post modules
|
2020-10-11 18:53:28 -04:00 |
|
|
h00die
|
f75367d8bd
|
docs and rubocop
|
2020-10-11 17:44:21 -04:00 |
|
|
h00die
|
3b5e05aff4
|
update avira password gather, add raw-md5u processing
|
2020-10-10 11:47:41 -04:00 |
|
|
Grant Willcox
|
71b9b5c2e7
|
Land #14235, Patch smart_hashdump so it doesn't skip RID 1001 when dumping hashes
|
2020-10-08 14:51:52 -05:00 |
|
|
Grant Willcox
|
69c68823d2
|
Land #14226, convert myworkspace.id to myworkspace_id for no db compat
|
2020-10-08 08:49:53 -05:00 |
|
|
0x44434241
|
4e40ae5d92
|
Spelling fix; 'controler' -> 'controller'.
|
2020-10-08 13:13:15 +09:00 |
|
|
0x44434241
|
659138d6ef
|
Removing unused variables as per rubocop suggestions.
|
2020-10-08 12:24:58 +09:00 |
|
|
0x44434241
|
fb04106c2f
|
Applying suggested rubocop formatting fixes.
|
2020-10-08 12:22:34 +09:00 |
|
|
0x44434241
|
ac4159b657
|
Removing 'skip rid 1001' from hashdump loop as per issue #14094.
|
2020-10-08 10:50:40 +09:00 |
|
|
Grant Willcox
|
339c1941ef
|
Add in myworkspace.id patch for the other missing modules
|
2020-10-07 17:08:00 -05:00 |
|
|
Alan Foster
|
30809787c4
|
Convert disclosure dates to iso8601
|
2020-10-02 21:00:37 +01:00 |
|
|
Grant Willcox
|
fb73be7e35
|
Land #14199, Fix SecureCRT missing registry key bug
|
2020-09-30 13:17:06 -05:00 |
|
|
Grant Willcox
|
b0bad9fc85
|
Fix up small issue with one of the checks and update the documentation with the new SESSION_PATH option
|
2020-09-30 12:26:32 -05:00 |
|
|
cn-kali-team
|
dce8bdc19a
|
Check that the folder does not exist
|
2020-09-30 07:39:33 +08:00 |
|
|
Tim W
|
bb04041c93
|
Land #14172, Fix #14170, Add option to disable autorun in persistence_exe
|
2020-09-25 13:16:51 +08:00 |
|
|
Tim W
|
77b7cf4f65
|
make RUN_NOW a non-advanced option
|
2020-09-25 13:15:34 +08:00 |
|
|
Tim W
|
72111a9677
|
don't start service unless RUN_NOW is true
|
2020-09-25 13:15:30 +08:00 |
|
|
ingroxd
|
62481f0159
|
Changed DisableExec with RUN_NOW for consistency
|
2020-09-23 09:12:31 +00:00 |
|
|
Grant Willcox
|
13bf1b7711
|
Land #14118, SecureCRT Session Credential Grabber, try 2
|
2020-09-22 15:38:25 -05:00 |
|
|
Grant Willcox
|
a96827a823
|
Land #14118, SecureCRT Session Credential Grabber
|
2020-09-22 15:17:04 -05:00 |
|
|
Grant Willcox
|
b9fa36c89b
|
Add in option to decrypt Login Script V3 within session files and also update some of the existing regex to fix some minor mistakes
|
2020-09-22 14:47:28 -05:00 |
|
|
ingroxd
|
e6978d7ef9
|
Added option to spik execution
|
2020-09-22 12:21:27 +00:00 |
|
|
Grant Willcox
|
67d43bcc15
|
Add in RuboCop fixes
|
2020-09-21 13:49:05 -05:00 |
|
|
Grant Willcox
|
9b1fec069f
|
Add in final touch up fixes to make sure that securecrt_store_config checks its input correctly, and to fix up some further mistakes found whilst reviewing the code for nil errors that could be fixed
|
2020-09-21 13:15:03 -05:00 |
|
|
Grant Willcox
|
ba76eabc72
|
Fix potential nil error with filling in the protocol field in enum_session_file
|
2020-09-21 12:23:23 -05:00 |
|
|
Grant Willcox
|
966ae4a6a3
|
Fix up the logic for calling securecrt_store_config
|
2020-09-21 12:10:12 -05:00 |
|