security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,538 Commits 47 Branches 0 Tags
python_conversion
Commit Graph

28 Commits

Author SHA1 Message Date
Atomic Red Team doc generator 5ede8f21e4 Generated docs from job=generate-docs branch=master [ci skip] 2025-02-13 22:03:40 +00:00
Atomic Red Team doc generator d10a13eb17 Generated docs from job=generate-docs branch=master [ci skip] 2025-01-28 05:03:31 +00:00
Hare Sudhan bfdd702717 Remove unused variable (#3040) 2025-01-28 00:02:41 -05:00
Atomic Red Team doc generator 012a309879 Generated docs from job=generate-docs branch=master [ci skip] 2024-11-19 04:10:36 +00:00
Hare Sudhan 92f492c4d4 fix T1555 (#2989) 2024-11-18 20:09:43 -08:00
Atomic Red Team doc generator f64434da24 Generated docs from job=generate-docs branch=master [ci skip] 2024-04-27 17:50:49 +00:00
Atomic Red Team doc generator 157de65031 Generated docs from job=generate-docs branch=master [ci skip] 2023-11-07 00:28:51 +00:00
Atomic Red Team doc generator 574a81359d Generated docs from job=generate-docs branch=master [ci skip] 2022-05-13 01:21:21 +00:00
Atomic Red Team GUID generator adebeb27d1 Generate GUIDs from job=generate-docs branch=master [skip ci] 2022-05-13 01:21:16 +00:00
tlor89 b384c8b7ab Update T1555.yaml (#1948) 
* Update T1555.yaml

Loot local Credentials - Invoke-WCMDump technique via function of WinPwn
Loot local Credentials - Wifi Credentials technique via function of WinPwn
Loot local Credentials - Decrypt Teamviewer Passwords technique via function of WinPwn

* Update T1555.yaml

added name: powershell

* Update T1555.yaml

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2022-05-12 19:20:49 -06:00
CircleCI Atomic Red Team doc generator 93a6ff56d0 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-08-27 19:58:05 +00:00
CircleCI Atomic Red Team GUID generator b7d3dbb3f4 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-08-27 19:57:59 +00:00
Ján Trenčanský 521b1abc16 T1555 enumeration with vaultcmd (#1581) 
* Extract credentials from Windows Credential Manager using vaultcmd.exe

* Replace external script dependency in T1555 with powershell command

* Add tests for both vaults in T1555

* T1555 fix name and description

* Revert "Replace external script dependency in T1555 with powershell command"

This reverts commit d8d6a7cf2bbc94a8240643ca600d9be62e0b697e.

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-08-27 13:57:24 -06:00
CircleCI Atomic Red Team doc generator 1e024d99ea Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-07-02 12:38:23 +00:00
Carrie Roberts c0e5117730 moving invoke-maldoc into art repo 2021-07-01 20:11:10 -06:00
CircleCI Atomic Red Team doc generator 36d49de4c8 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-24 17:04:33 +00:00
CircleCI Atomic Red Team doc generator 575b36a8e6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-24 15:16:54 +00:00
CircleCI Atomic Red Team doc generator 88ad3fd322 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-16 18:41:22 +00:00
SecurityShrimp 42799b033d added TLS/SSL v1.2 enabling commands to any atomic test utilizing IWR (#1519) 
* Update T1204.002.md

Added lines to each test using IWR for invoke-webrequest to set the acceptable TLS versions for the commands to complete successfully by prepending the tests with 

```[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12```

* Update T1555.yaml

added line to set ssl/tls version

* Update T1134.001.yaml

updated IWR lines to allow ssl/tls version 1.2

* Update T1069.002.yaml

added lines to every IWR instance to set ssl/tls version to 1.2

* Update T1558.003.yaml

added line to allow TLS/SSL 1.2

* Update T1033.yaml

added command to enable SSL/TLS v1.2

* Update T1055.012.yaml

added command to enable TLS/SSL v1.2

* Update T1115.yaml

Added command to enable SSL/TLS v1.2

* Update T1070.001.yaml

added command enabling SSL/TLS v 1.2

* Update T1564.yaml

added commands to enable SSL/TLS v 1.2

* Update T1566.001.yaml

added command to enable SSL/TLS V1.2

* Update T1135.yaml

added command to enable SSL/TLS v1.2

* Update T1055.yaml

added commands to enable TLS/SSL v 1.2

* Update T1110.003.yaml

added command to enable TLS/SSL v1.2

* Update T1003.yaml

Added command to enable TLS/SSL v1.2

* Update T1053.005.yaml

added command to enable TLS/SSL v1.2

* Update T1003.001.yaml

added commands to enable TLS/SSL v1.2 for any command using invoke-webrequest

* Update T1069.002.yaml

syntax correction

* Update T1134.001.yaml

syntax correction

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-06-16 12:41:04 -06:00
CircleCI Atomic Red Team doc generator b97bfd31e6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-10 17:18:45 +00:00
CircleCI Atomic Red Team GUID generator f123433567 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-06-10 17:18:39 +00:00
Suman Kar 1c799637ce New Dump credentials from Windows Credential Manager With PowerShell … (#1508) 
* New Dump credentials from Windows Credential Manager With PowerShell [windows Credentials & web Credentials]

* Update T1555.yaml

* Update T1555.yaml

* use permanent github link for script

* use github permanent link for script

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-06-10 11:18:12 -06:00
CircleCI Atomic Red Team doc generator f62f72c9d8 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-08 13:12:07 +00:00
Ryan d5f39f7819 Update T1555.yaml (#1415) 
Was failing prereqs due to missing $process value

Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com>
 2021-04-08 07:11:40 -06:00
CircleCI Atomic Red Team doc generator 228dcb1ae3 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-04-02 13:28:54 +00:00
Carrie Roberts 8b6c9af427 add usebasicparsing flag (#1410) 2021-04-02 07:28:29 -06:00
Keith McCammon 28086402e2 Maintainers updates (#1328) 
* Update maintainers.md

Remove reference to announcements channel, which has been created.

* Generate docs from job=validate_atomics_generate_docs branch=maintainers-updates

* Update maintainers.md

Updates to maintainers meeting purpose, scope, and agendas.

* Generate docs from job=validate_atomics_generate_docs branch=maintainers-updates

Co-authored-by: CircleCI Atomic Red Team doc generator <email>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2020-12-15 14:18:41 -07:00
Ama Smuggle Avocados 46b69318c8 Credmanager (#1327) 
* initial push for T1555 (Extract Windows Credential Manager via Maldoc)

* updates

* updates

* update

Co-authored-by: avocado <avocados@smuggler.com>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2020-12-11 08:34:34 -07:00