5ede8f21e4
Generated docs from job=generate-docs branch=master [ci skip]
2025-02-13 22:03:40 +00:00
cef46e4479
Generated docs from job=generate-docs branch=master [ci skip]
2023-06-15 16:17:12 +00:00
068d32b1ea
use ExternalPayloads directory ( #2460 )
...
* use ExternalPayloads directory
* use ExternalPayloads directory
* use ExternalPayloads directory
2023-06-15 10:16:12 -06:00
16594d72c5
Generated docs from job=generate-docs branch=master [ci skip]
2023-02-13 23:11:19 +00:00
a5dd0813cd
fix: Updating atomics YAML file structure to align with the new JSON schema definition ( #2323 )
...
* fix: Updating atomics YAML file structure to align with the new JSON schema definition.
This also fixes some white space issues and general line formatting across all impacted atomics.
* fix: One additional change needed
---------
Co-authored-by: MSAdministrator <MSAdministrator@users.noreply.github.com >
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2023-02-13 16:10:37 -07:00
09bc35dea1
Generated docs from job=generate-docs branch=master [ci skip]
2022-09-26 17:40:43 +00:00
869f7e880d
mimi prereq fixes ( #2163 )
...
* mimi prereq fixes
* fix url to helper
2022-09-26 11:40:00 -06:00
d0dad62dbc
Generated docs from job=generate-docs branch=master [ci skip]
2022-09-23 22:57:18 +00:00
6146dbfa24
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-11-16 16:04:07 +00:00
274fa5584b
Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-11-16 16:04:02 +00:00
8fdb9ba016
Add golden ticket attack with Rubeus tool ( #1668 )
...
* Add golden ticket attack with Rubeus tool
* update spacing
* clarify input arg desc
2021-11-16 09:03:23 -07:00
9ebf782b2f
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-11-15 16:38:44 +00:00
66f06f62d9
set domain programatically ( #1666 )
...
Co-authored-by: Michael Haag <5632822+MHaggis@users.noreply.github.com >
2021-11-15 09:38:13 -07:00
bc21f59ff0
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-09-04 00:21:31 +00:00
1513717eb2
Updating atomics to conform to standard ( #1619 )
...
* Updated format of input_argument types for Url
* Updated type for input_arguments to Url (missed)
* Updating Path type for input_arguments
* Updated String type for input_arguments
* Missed a few Strings and Url types
* Updated default values for input_arguments to align with their types
* Updated Integer type for input_arguments
* Updated formatting and spacing of atomics
2021-09-03 18:20:46 -06:00
b10fa043d1
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-08-23 21:09:34 +00:00
50e36cb7e7
Update hardcoded Mimikatz releases download URLs ( #1604 )
...
* update references to hardcoded mimikatz releases
* update invoke-webreauest parameters
* apply -UseBasicParsing consistently to Invoke-WebRequest calls
Co-authored-by: Carrie Roberts <clr2of8@gmail.com >
2021-08-23 15:08:54 -06:00
6f40c444af
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-07-07 17:38:50 +00:00
1a4c4a97d2
Improve discoverability of "Active Directory" attacks ( #1544 )
2021-07-07 11:38:22 -06:00
36d49de4c8
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-06-24 17:04:33 +00:00
575b36a8e6
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-06-24 15:16:54 +00:00
443e0318fc
Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci]
2021-01-06 18:35:50 +00:00
d50239ff57
T1558.001: add test "Golden ticket" ( #1351 )
...
* T1558.001: add test "Golden ticket"
Co-authored-by: Zakaria Addi <zakaria.addi@alsid.com >
Co-authored-by: Clément Notin <clement.notin@alsid.com >
* Add support for default domain SID (one less parameter to specify)
With default:
invoke-atomictest T1558.001 -InputArgs @{ "domain" = "lab.lan" ; "krbtgt_aes256_key"="xxxxx" }
[...]
mimikatz(commandline) # kerberos::golden /domain:lab.lan /sid:S-1-5-21-1891480667-311803191-3341389180 /aes256:xxxxx /user:goldenticketfakeuser /ptt
With specific SID ("toto"):
invoke-atomictest T1558.001 -InputArgs @{ "domain" = "lab.lan" ; "krbtgt_aes256_key"="xxxxx" ; "domain_sid"="toto" }
[...]
mimikatz(commandline) # kerberos::golden /domain:lab.lan /sid:toto /aes256:xxxxx /user:goldenticketfakeuser /ptt
Co-authored-by: Zakaria Addi <zakaria.addi@alsid.com >
2021-01-06 11:35:14 -07:00
Atomic Red Team doc generator