5087e0ffe3
Land #18197 , Ldap login scanner module
...
Adds a new login scanner module for LDAP
2023-10-02 10:56:56 -04:00
c1a44c8b7f
Land #18359 , Forge ticket fix
2023-09-18 13:05:25 +01:00
483e8175ca
Update unit tests
2023-09-13 14:11:18 +10:00
1af852b240
Add remote ldap specs
2023-09-11 16:33:01 +01:00
235c142274
Merge remote-tracking branch 'origin/flask_unsign' into flask_unsign
2023-09-11 10:27:00 -04:00
143e1c82b5
Add validation functionality to FlaskUnsign
2023-09-07 16:19:58 -04:00
213b9f9589
Merge remote-tracking branch 'upstream/master' into flask_unsign
2023-09-06 15:39:37 -04:00
d84c15cf21
lib and spec updates
2023-08-17 15:29:20 -04:00
3d3e2a9e2d
apache supserset exploit
2023-07-11 15:19:33 -04:00
2c2f855e20
working cookies for superset
2023-07-06 07:12:39 -04:00
62775e0749
fix spec
2023-07-02 13:10:43 -04:00
c9249fd9b7
basics
2023-07-02 12:37:58 -04:00
48a5f33f35
Add option to include a ticket checksum while forging a ticket
2023-03-06 13:19:59 +00:00
efd79eb638
Add support for forging inter-realm Kerberos tickets
2023-03-03 13:20:39 +00:00
647cf1d402
Return Time from #extract_logon_time
2023-01-27 10:05:02 -05:00
dc6c1e333b
Land #17553 , Framework 6.3.0
2023-01-26 13:30:27 -06:00
9be26eb0ff
improve SMTP delivery error handling
2023-01-20 11:26:25 -06:00
3d22fbcad9
Add exploit module for Certifried exploit
...
- Move all the logic from `modules/auxiliary/admin/dcerpc/icpr_cert.rb`
to `lib/msf/core/exploit/remote/ms_icpr.rb` library
- Move all the logic from `modules/auxiliary/admin/dcerpc/samr_computer.rb`
to `lib/msf/core/exploit/remote/ms_samr.rb` library
- Add `modules/auxiliary/admin/dcerpc/cve_2022_26923_certifried.rb` module
- Update the SMB client to disable SSL by default
- Add documentation
- Kerbero client: pass `options` as argument to `send_request_as`
- `calculate_shared_key` returns an EncryptionKey instead of the raw key
- Update `pkinit_login` module to make it compatible
- Add support to `additional_tickets` when requesting tickets
- Add support to PAC CredentialInfo structures
- Add impersonation to escalate privileges
- Add ACTIONS
- Use elevated TGS to delete the computer account
- Update and add specs
2023-01-13 15:30:50 +01:00
a8957bce49
Update tgt response to include key
2022-12-30 13:41:54 +00:00
28bd37b0a7
Update rasn1 dependency for pkinit
2022-12-14 00:32:26 +00:00
1e2ada3cce
Add options validation depending on action in forge_ticket.rb
2022-12-06 12:55:42 +00:00
405271a52f
Add pac BinData Model
2022-12-05 14:03:21 +00:00
8efc6c5304
Land #17103 , Consolidate KdcOptionFlags and TicketFlags
2022-11-09 17:27:17 +00:00
7c2134d941
Consolidate KdcOptionFlags and TicketFlags
2022-11-09 17:08:26 +00:00
65f6aaca82
Land #17077 , Add support for AES keys for silver/golden ticket forging
2022-11-09 16:51:11 +00:00
23ff829e52
Add support for AES keys for silver/golden ticket forging
2022-11-09 13:01:13 +00:00
37fd441b0f
Land #17117 , Authenticate to Kerberos with PKINIT
2022-11-08 18:54:03 +01:00
a110465fe4
Add module for converting kerberos ticket formats
2022-11-07 12:10:01 +00:00
09e740d48d
Changes from code review
2022-10-17 17:19:50 +11:00
aa98c9d004
Removed vestigial test
2022-10-07 14:29:20 +11:00
db12c7e0f0
Added tests for parsing new Kerberos structures
2022-10-07 14:04:24 +11:00
58c30f10aa
Send and Receive PKINIT responses
2022-10-07 01:04:10 +11:00
5d345e6689
Merge branch 'upstream-master' into feature-kerberos-authentication
2022-09-29 16:42:58 +01:00
3a281234df
Add feature flagged datastore rewrite, with support for option fallback lookups
2022-09-16 12:59:02 +01:00
5f85175f56
Add module for golden/silver ticket forging
2022-09-01 16:12:07 +01:00
39f90d95b1
Create sessions for winrm_login successes.
...
Reuses the connection, so that authentication doesn't need to happen again
2022-07-08 16:57:09 +10:00
d3e7152954
Changes from code review
2022-07-08 11:47:54 +10:00
f9f3be3644
Fix unit tests
2022-07-07 18:04:22 +10:00
b2eb348d94
Added WinRM using Kerberos, including encryption
2022-07-07 13:17:09 +10:00
aea37f7137
Add initial SMB Kerberos authentication support
2022-07-06 16:15:33 +01:00
d31ffa27d3
Add and use a new kerberos CCache model definition
2022-07-01 11:57:30 -04:00
15446fd173
Incorporated new encryption methods into login scanner, including negotiating
2022-06-22 09:36:25 +10:00
19b62a5af6
Support several new encryption types for Kerberos.
...
Supports DES-CBC-MD5, DES3-CBC-SHA1, AES128, AES256
2022-06-22 09:13:33 +10:00
f8901a8b17
Add Kerberos LoginScanner support
2022-06-20 16:38:32 +01:00
f1e5376414
Move kerberos tests to be under the remote folder
2022-06-08 03:21:25 +01:00
adeb87b817
Remove tests for code that was removed
2022-05-16 14:39:45 -04:00
0196b6fa75
Land #16555 , move duplicated retry_until_truthy code into centralized location
2022-05-16 18:31:57 +01:00
1aceb71971
Rename the function to emphasize truthy
2022-05-13 09:16:01 -04:00
3d37f2f811
Change the timeout value to be nil
2022-05-13 09:14:23 -04:00
6ba2b15ab2
Overhaul retry_until_true specs
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2022-05-13 09:06:51 -04:00
Jack Heysel