Ashley Donaldson
713b0e1b41
Fixed OS Version checking
2021-11-30 22:43:28 +11:00
Ashley Donaldson
0c0001b134
Implementing a 5th getsystem mechanism: print spooler.
...
Leverages the SeImpersonatePrivilege with the Print Spooler primitive.
2021-11-19 20:12:19 +11:00
Tim W
0d2f0f380d
whitespace fixup
2021-09-22 15:48:12 +01:00
Tim W
4f49792feb
fix windows wds3_search
2021-09-22 14:51:10 +01:00
Tim W
8ec7d7b254
cleanup windows fs_search
2021-09-22 13:13:27 +01:00
Tim W
027de2be9c
fix windows build
2021-09-20 19:08:06 +01:00
Tim W
949b9de394
minor cleanups on windows search.c
2021-09-20 15:38:13 +01:00
test
e43f437a2c
Clarified variable names
2021-09-20 15:38:13 +01:00
test
e2f9e64779
Updated search functionality
2021-09-20 15:38:13 +01:00
test
13a1b7e0b3
Source code for searching by date
2021-09-20 15:38:13 +01:00
Spencer McIntyre
af80d5279a
Pull in changes from rapid7/mimikatz#6
2021-08-02 12:08:08 -04:00
Tim W
acd5f4e8d4
Land #493 , fix cmake build errors
2021-07-31 15:32:57 +01:00
Spencer McIntyre
8eee62d80e
Fix a mingw build error
2021-07-16 15:53:22 -04:00
Spencer McIntyre
50aac33fe6
Update mimikatz (the kiwi extension)
2021-06-11 14:22:55 -04:00
Tim W
dc4d69d695
fix request_fs_ls on an inaccessible file
2021-03-30 19:35:16 +01:00
Zeev R
8825987525
Tiny bug fix.
...
The nMaxInstances argument refers only to subsequent calls to CreateNamedPipe and not to calls that just open the pipe.
There is no reason to enable anybody else but us to create a pipe with the same name.
2021-02-24 18:55:04 +02:00
Spencer McIntyre
c911749430
Fix a guard condition to check the correct thing
2020-12-18 16:08:14 -05:00
Tim W
be443779ff
fix free() process.execute wchars
2020-11-30 18:48:26 +00:00
Kali-Team
7933f06484
[stdapi] support_unicode_characters_for_execute
2020-11-24 17:41:07 +08:00
William Vu
8e3933bed7
Revert "Undo commit for #441 "
...
This reverts commit 8361d5367a7400d166da3c8b772077aa9a0a793e, reversing
changes made to db3d5f0896ac74b3918387be24de1e994451820d.
2020-10-11 20:49:06 -05:00
William Vu
8c5ab95cd2
Revert "Land #441 - Fix missing TLV migration from string to int"
...
This reverts commit eb1d51b94e0fa8102734ee3999c53448f9f6f42c, reversing
changes made to b6ce0dff183995ba402c1fe3ebbf74f7a7d8f492.
2020-10-11 20:08:15 -05:00
Spencer McIntyre
1aac00a6ce
Disconnect the named pipe and break after the impersonation callback
2020-10-06 15:21:25 -04:00
Spencer McIntyre
e96d8e5fc8
Fix a bad comment
2020-08-20 14:42:17 -04:00
Spencer McIntyre
25a0b76797
Filter out Windows < 6.3 for the namedpipe_rpcss technique
2020-08-20 14:05:48 -04:00
Spencer McIntyre
ee69b4f274
Revert "Add a fourth parameter to the thread API"
...
This reverts commit 0afe17d160e8846dd7d52814947c6e7461f5f45e.
2020-08-19 11:54:45 -04:00
Spencer McIntyre
cf4614c941
Working on Windows 10 from native x64 and WOW64
2020-08-19 11:54:45 -04:00
Spencer McIntyre
ce7dd3f699
Clean up the namedpipe_rpcss code
2020-08-19 11:54:21 -04:00
Spencer McIntyre
7967fd569d
x64 version is working
2020-08-18 15:41:42 -04:00
Spencer McIntyre
ee72ac26b9
Add support for a callback after named pipe impersonation
2020-08-14 18:12:02 -04:00
Spencer McIntyre
0afe17d160
Add a fourth parameter to the thread API
2020-08-14 17:47:59 -04:00
OJ
68e27f00fa
Force mimikatz and RDI submodules to point to master
2020-07-03 08:47:41 +10:00
OJ
1fc117743f
Fix kiwi build
2020-06-25 23:29:36 +10:00
OJ
7fab0b200a
Building, but not working yet
...
Got an issue where certain functions aren't being resolved and hence are
null when being invoked. Need to debug the loading of the DLL to see why
this is the case.
2020-06-25 10:32:32 +10:00
OJ
37fb807a95
Get extapi compiling under mingw
2020-06-25 10:31:53 +10:00
OJ
3d4d4706e2
Remove unused local
2020-06-25 10:31:48 +10:00
OJ
b55b186e79
Final pass of working stuff for the day
2020-06-25 10:31:45 +10:00
OJ
205405effe
Final winpmem changes.. I think
2020-06-25 10:31:05 +10:00
OJ
936fa267b4
More of the cross compilation dance!
2020-06-25 10:31:03 +10:00
OJ
e7162dda2c
Few more cross comp changes for pmem
2020-06-25 10:31:00 +10:00
OJ
cb0c1d476c
Fix some winpmem stuff for cross building
2020-06-25 10:30:57 +10:00
OJ
fdb785dcee
Few more build fix ups and removal of warnings
2020-06-25 10:30:53 +10:00
OJ
effe6b9827
Lots of changes + stdapi support
2020-06-25 10:30:49 +10:00
OJ
aa3b58628f
Get rid of the clang noise
2020-06-25 10:29:51 +10:00
OJ
e6441ad2fa
Remove DLL exports from Meterpreter
...
Add support for loading RDI-related stuff using ordinals instead of
function names. Remove exports from the extensions/etc. This is another
step in the direction to make the DLLs less obvious.
Extensions no longer have their own name in the library metadata.
They're all "extension.dll". Metsrv is now "server.dll" and the two
non-extensions are "plugin.dll". I was going for something a little less
obvious.
This required changes to the RDI functionality.
2020-06-25 10:28:36 +10:00
OJ
aec49a7863
Final tidy up
2020-06-22 08:25:51 +10:00
OJ
c9ca614313
Remove DLL exports from Meterpreter
...
Add support for loading RDI-related stuff using ordinals instead of
function names. Remove exports from the extensions/etc. This is another
step in the direction to make the DLLs less obvious.
Extensions no longer have their own name in the library metadata.
They're all "extension.dll". Metsrv is now "server.dll" and the two
non-extensions are "plugin.dll". I was going for something a little less
obvious.
This required changes to the RDI functionality.
2020-06-22 08:25:30 +10:00
Spencer McIntyre
c8312f9c73
Land #397 , Change from PEM to DER for crypt TLV negotiation
2020-06-18 13:54:31 -04:00
OJ
c5f8f893ac
Remove the mimikatz extension
...
Also turn off PDB generation for the sniffer extension.
2020-06-11 08:34:17 +10:00
OJ
6419fa9e40
Fix buffer meta type values, typos and function calls
2020-06-09 10:57:44 +10:00
OJ
30f232a7fd
Adjust TLV types and fix up code to deal with new raw api
2020-06-09 10:57:44 +10:00
