OJ
2cd4f3cf98
Turn off debug builds
2017-08-09 15:59:37 +10:00
OJ
a10938e5a0
Revert changes made to getprivs
...
This work should be done in another PR
2017-08-09 15:58:38 +10:00
OJ
bc6c2039fb
Add debug statements, and fix one that was causing crashes
2017-08-09 13:03:12 +10:00
OJ
005ba6a8c0
Merge branch upstream into packet-pivot
2017-08-08 17:37:59 +10:00
OJ
b363584648
Merge branch 'upstream/master' into transport-agnostic-packet-encryption
2017-08-08 17:37:25 +10:00
OJ
0413a5c2ce
Add check for existing session reconnect
2017-08-08 17:15:49 +10:00
OJ
5f8b775842
Fix reading data from pipe, fix XOR bug in x64
2017-08-07 19:51:24 +10:00
OJ
95f1903a10
Update kiwi module to disable busylight notification
2017-08-03 09:45:07 +10:00
William Webb
7ae31a76f1
Land #220 , Support Hi DPI for screenshots
2017-07-25 23:12:29 -05:00
OJ
c30d7ee349
Fix session GUID creation/management for pivots
2017-07-25 17:40:54 +10:00
Brent Cook
ead41b1092
initial unicode conversion for incognito
2017-07-23 04:41:51 -07:00
Brent Cook
cdff912abf
support hidpi for screenshots
2017-07-22 08:35:28 -07:00
Brent Cook
b8a60c1561
use prefix for debug messages, 64-bit consistently for memory sizes and offsets
2017-07-22 08:31:13 -07:00
Brent Cook
94f4147425
give attribution
2017-07-22 06:15:34 -07:00
Brent Cook
9118645a6e
simplify and reduce logic
2017-07-22 06:12:19 -07:00
Artem
770d0f65f4
Update fs_win.c
...
Fix FS Stat on Windows XP
2017-07-22 06:12:13 -07:00
OJ
d7c741f858
Fix reconnect pipe read issue
...
Also fix up issue with the pivot tree code
2017-07-21 20:50:43 +10:00
OJ
82cf5e7941
Fix issue with inspection of the wrong byte for xor keys
2017-07-21 18:33:15 +10:00
OJ
e12e711ec5
Interim commit while debugging
2017-07-21 18:27:04 +10:00
OJ
293d79d0ed
Adjust HTTP/S transport to support packet pivot
2017-07-18 21:15:08 +10:00
OJ
415665ef59
Pivot stability, fixes, tidies, etc
2017-07-18 20:58:23 +10:00
OJ
5a04de0780
Fix transport list command to support named pipes
2017-07-18 13:40:40 +10:00
OJ
fac1bfa489
Fix issue with packet size calculation
...
This commit fixes an issue where the transports were calculating an
incorrect size for the packet that was being received. This wasn't
noticable until packet pivot work started, and for some reason wasn't
causing breakages during local testing. Either way, it's fixed now!
2017-07-17 11:11:25 +10:00
OJ
2ede006025
First working packet pivot session!
2017-07-16 19:33:24 +10:00
William Webb
6fc00bc812
cleanup memleak
2017-07-14 01:24:54 -05:00
OJ
cba5e86ac2
Add support for the pivot ID
2017-07-11 19:43:23 +10:00
OJ
6d2582102d
Slow progress on pipe packet pivots
2017-07-10 20:00:37 +10:00
William Webb
d25ff91ca2
axe errant DebugBreak()
2017-07-06 20:21:22 -05:00
William Webb
c144bac8d9
gracefully handle threading and correctly destroy msg only window
2017-07-06 19:57:07 -05:00
OJ
f96fe3542f
Next phase of packet pivot work
2017-07-06 15:40:32 +10:00
William Webb
519194dc6c
log pid on new active window
2017-07-05 20:34:37 -05:00
OJ
fc6c593eb7
Add the first pass of named pipe pivot code
2017-07-05 16:15:06 +10:00
OJ
c74376fb69
Make enc flags 32 bit, fix extension bindings
...
This updates the packet header so that the encryption byte flag is now
32 bits. This also updates the powershell and python extensions so that
both of the bindings work correctly as a result of the TLV packet header
changes.
2017-07-03 16:51:57 +10:00
OJ
f5b29bd7c6
Land #210 : set thread error mode
2017-06-29 17:33:46 +10:00
Brent Cook
1a9bfc8c68
disable thread error reporting globally
2017-06-29 01:07:22 -04:00
OJ
9fd56beba0
Refactor pub key encryption code
...
Extract the publicy key encryption code out into another method and
cater for more error conditions.
2017-06-28 12:50:53 +10:00
Brent Cook
f95710249b
Land #209 , Make keyscan active window tracking discretionary
2017-06-25 17:39:41 -05:00
OJ
a911045d5e
Merge upstrea/master + fix issues
2017-06-25 19:52:11 +10:00
OJ
12055fca25
Finalised support for RSA-encrypted AES key negotiation
...
Still needs to be wired into HTTP/S.
2017-06-25 10:24:40 +10:00
Brent Cook
0356a5068d
add thread preamble that sets the per-thread error mode
2017-06-23 20:37:56 -05:00
Artem
fe8920640d
Add Disable Windows Error Messages
2017-06-23 20:37:56 -05:00
Brent Cook
c7f614a799
Land #200 , Fix winpmem builds, warnings, cleanup logging
2017-06-23 18:00:22 -05:00
William Webb
cad32aaa33
kill whitespace
2017-06-23 14:08:08 -05:00
William Webb
419533ce48
kill whitespace
2017-06-23 13:56:07 -05:00
William Webb
f437e6aef7
use conventional option/TLV scheme instead of dumb stuff
2017-06-23 13:51:08 -05:00
Brent Cook
fb80f87ee3
Land #204 , Update to Mimikatz 2.1.1 20170608 for changentlm function
2017-06-22 10:45:34 -05:00
OJ
8ffb877610
Initial version of working AES encrypted TLV packets
2017-06-21 21:02:33 +10:00
Brent Cook
efe6f32197
fix 64-bit r7 target build
2017-06-21 03:01:56 -05:00
OJ
cb9ae6acd4
Rework the packet XOR code
...
Make the XOR key an array of bytes as a start to normalise the way the
XOR happens across the board. Given that we're going to be adding
encryption to the packet level and adding more stuff to the packet
header, now is the time to fix this up once and for all.
2017-06-20 19:20:41 +10:00
OJ
8858acb618
Initial attempt to AES encryption at the packet level
2017-06-20 17:50:58 +10:00