647cf1d402
Return Time from #extract_logon_time
2023-01-27 10:05:02 -05:00
dc6c1e333b
Land #17553 , Framework 6.3.0
2023-01-26 13:30:27 -06:00
9be26eb0ff
improve SMTP delivery error handling
2023-01-20 11:26:25 -06:00
3d22fbcad9
Add exploit module for Certifried exploit
...
- Move all the logic from `modules/auxiliary/admin/dcerpc/icpr_cert.rb`
to `lib/msf/core/exploit/remote/ms_icpr.rb` library
- Move all the logic from `modules/auxiliary/admin/dcerpc/samr_computer.rb`
to `lib/msf/core/exploit/remote/ms_samr.rb` library
- Add `modules/auxiliary/admin/dcerpc/cve_2022_26923_certifried.rb` module
- Update the SMB client to disable SSL by default
- Add documentation
- Kerbero client: pass `options` as argument to `send_request_as`
- `calculate_shared_key` returns an EncryptionKey instead of the raw key
- Update `pkinit_login` module to make it compatible
- Add support to `additional_tickets` when requesting tickets
- Add support to PAC CredentialInfo structures
- Add impersonation to escalate privileges
- Add ACTIONS
- Use elevated TGS to delete the computer account
- Update and add specs
2023-01-13 15:30:50 +01:00
a8957bce49
Update tgt response to include key
2022-12-30 13:41:54 +00:00
28bd37b0a7
Update rasn1 dependency for pkinit
2022-12-14 00:32:26 +00:00
1e2ada3cce
Add options validation depending on action in forge_ticket.rb
2022-12-06 12:55:42 +00:00
405271a52f
Add pac BinData Model
2022-12-05 14:03:21 +00:00
8efc6c5304
Land #17103 , Consolidate KdcOptionFlags and TicketFlags
2022-11-09 17:27:17 +00:00
7c2134d941
Consolidate KdcOptionFlags and TicketFlags
2022-11-09 17:08:26 +00:00
65f6aaca82
Land #17077 , Add support for AES keys for silver/golden ticket forging
2022-11-09 16:51:11 +00:00
23ff829e52
Add support for AES keys for silver/golden ticket forging
2022-11-09 13:01:13 +00:00
37fd441b0f
Land #17117 , Authenticate to Kerberos with PKINIT
2022-11-08 18:54:03 +01:00
a110465fe4
Add module for converting kerberos ticket formats
2022-11-07 12:10:01 +00:00
09e740d48d
Changes from code review
2022-10-17 17:19:50 +11:00
aa98c9d004
Removed vestigial test
2022-10-07 14:29:20 +11:00
db12c7e0f0
Added tests for parsing new Kerberos structures
2022-10-07 14:04:24 +11:00
58c30f10aa
Send and Receive PKINIT responses
2022-10-07 01:04:10 +11:00
5d345e6689
Merge branch 'upstream-master' into feature-kerberos-authentication
2022-09-29 16:42:58 +01:00
3a281234df
Add feature flagged datastore rewrite, with support for option fallback lookups
2022-09-16 12:59:02 +01:00
5f85175f56
Add module for golden/silver ticket forging
2022-09-01 16:12:07 +01:00
39f90d95b1
Create sessions for winrm_login successes.
...
Reuses the connection, so that authentication doesn't need to happen again
2022-07-08 16:57:09 +10:00
d3e7152954
Changes from code review
2022-07-08 11:47:54 +10:00
f9f3be3644
Fix unit tests
2022-07-07 18:04:22 +10:00
b2eb348d94
Added WinRM using Kerberos, including encryption
2022-07-07 13:17:09 +10:00
aea37f7137
Add initial SMB Kerberos authentication support
2022-07-06 16:15:33 +01:00
d31ffa27d3
Add and use a new kerberos CCache model definition
2022-07-01 11:57:30 -04:00
15446fd173
Incorporated new encryption methods into login scanner, including negotiating
2022-06-22 09:36:25 +10:00
19b62a5af6
Support several new encryption types for Kerberos.
...
Supports DES-CBC-MD5, DES3-CBC-SHA1, AES128, AES256
2022-06-22 09:13:33 +10:00
f8901a8b17
Add Kerberos LoginScanner support
2022-06-20 16:38:32 +01:00
f1e5376414
Move kerberos tests to be under the remote folder
2022-06-08 03:21:25 +01:00
adeb87b817
Remove tests for code that was removed
2022-05-16 14:39:45 -04:00
0196b6fa75
Land #16555 , move duplicated retry_until_truthy code into centralized location
2022-05-16 18:31:57 +01:00
1aceb71971
Rename the function to emphasize truthy
2022-05-13 09:16:01 -04:00
3d37f2f811
Change the timeout value to be nil
2022-05-13 09:14:23 -04:00
6ba2b15ab2
Overhaul retry_until_true specs
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2022-05-13 09:06:51 -04:00
8b52dbcaf9
Add a basic retry spec
2022-05-11 15:57:59 -04:00
a53be3184a
Improving error handling of Kerberos
2022-04-08 20:48:10 +01:00
abe55c8f91
raise RuntimeError on incomplete or extra data
2022-02-24 14:02:44 -06:00
cb388b0b4c
add SMTPDeliver spec
...
* define smtp_send_recv expectations
2022-02-14 18:48:27 -06:00
990e4a1e7a
pihole new module and lib
2022-01-02 11:48:41 -05:00
c3e0f455ec
some cleanup for rubocop
2021-12-30 15:35:22 -05:00
134fef21c4
Improve validation rhosts validation
2021-09-02 13:00:01 +01:00
ded8200396
Land #15537 , Add support for ruby 3
2021-09-01 10:30:54 +01:00
0530f78d12
add comments and test
2021-08-12 10:18:13 -05:00
d0c0372596
add request / response classes
2021-08-12 10:18:12 -05:00
255f93827b
Fix broken cookiejar tests
2021-08-10 15:40:23 +01:00
5e732ddd42
changes parse to take an origin and updates tests
2021-08-03 18:22:23 +01:00
c7d4155511
add origin to httpcookie and supporting tests
2021-07-28 14:04:48 +01:00
39455827aa
Land #15254 , use obfuscated powershell protection bypasses
2021-07-12 12:20:17 +01:00
Spencer McIntyre