Spencer McIntyre
d5a325895d
Update the MinGW builds
2023-04-27 10:53:17 -04:00
Spencer McIntyre
1c4f2df278
Use dump_sam for WOW64 support
...
Switch to using the dump_sam RDLL for x86, WOW64 and x64 hashdump
support.
2023-04-27 09:52:50 -04:00
Spencer McIntyre
d64c312029
Update the signature for inject_dll
...
Need to be able to pass things that are not strings
2023-04-27 09:52:50 -04:00
Spencer McIntyre
d114f5ec0a
Add the dump_sam project
...
This is going to build a stand-alone RDLL that can be injected into
LSASS for hashdump.
The samsrv.dll functions still need to be resolved because they're not
exported but the rest can be used normally thanks to the RDLL loader.
Defined 32-bit and 64-bit structures that are compatible with MSVC and
MinGW. DLLs are dynamically linked for size and the Visual-C Runtime is
not used.
The reflectively loaded DLL is freed once the operation has completed.
2023-04-27 09:52:50 -04:00
Metasploit
ec15ce4944
Bump metasploit-payloads to 2.0.130
2023-04-27 08:34:50 -05:00
adfoster-r7
8e9f2c04a6
Land #639 , Build mingw build on Github actions
2023-04-27 14:24:08 +01:00
adfoster-r7
5e769a90be
Build mingw build on Github actions
2023-04-27 11:48:37 +01:00
Metasploit
41800bbbff
Bump metasploit-payloads to 2.0.129
2023-04-26 14:23:21 -05:00
Spencer McIntyre
9775c73c33
Land #634 , add memory read/write for python
...
add memory read/write abilities to python windows meterpreter
2023-04-26 15:12:13 -04:00
Spencer McIntyre
41767690f0
Use None instead of 0 for missing values
2023-04-26 14:22:16 -04:00
Alex Romero
dbf1916a65
check for invalid parameter in read/write memory
2023-04-25 19:28:42 -04:00
Metasploit
6bac251842
Bump metasploit-payloads to 2.0.128
2023-04-20 18:03:55 -05:00
bwatters-r7
d83c7b4e73
Land #630 , Fix a MinGW issue in the stdapi extension
...
Merge branch 'land-630' into upstream-master
2023-04-20 17:54:35 -05:00
Metasploit
62511f1d09
Bump metasploit-payloads to 2.0.127
2023-04-19 11:10:54 -05:00
dwelch-r7
908f993698
Land #636 , Fix debug logging for Windows 7
2023-04-19 17:02:34 +01:00
adfoster-r7
41e7a26c77
Fix debug logging for Windows 7
2023-04-19 16:28:03 +01:00
Alex Romero
4f12dd814b
add memory read/write abilties to python windows meterpreter
2023-04-14 16:27:09 -04:00
Metasploit
d9b04ace74
Bump metasploit-payloads to 2.0.126
2023-04-14 09:21:12 -05:00
Spencer McIntyre
1256c6efc0
Land #633 , Add memory lock/unlock for Python
...
add memory lock/unlock abilties to python windows meterpreter
2023-04-14 10:12:40 -04:00
Metasploit
8890cd8098
Bump metasploit-payloads to 2.0.125
2023-04-07 17:38:58 -05:00
Spencer McIntyre
c70cf8c580
Land #625 , fix for #608 issue in getsystem methods
...
fix for #608 issue in getsystem methods
2023-04-07 18:30:29 -04:00
Alex Romero
ca33cce237
Merge pull request #1 from smcintyre-r7/pr/collab/625
...
Pr/collab/625
2023-04-08 00:45:43 +03:30
Spencer McIntyre
53467c9b7b
Filter out systems older than Windows 6.0
...
XP SP 2 does not work and while technically XP SP 3 does, they share the
same version information. This takes a conservative approach and
prevents running on XP at all to ensure the session won't crash.
2023-04-07 16:33:42 -04:00
Spencer McIntyre
0aeeeee56f
Cleanup things up a bit
...
* Simplify pipe selection logic
* Make the version check more strict
* Remove debug messages from release builds
2023-04-07 15:09:28 -04:00
Spencer McIntyre
c1e522f102
Update the mimikatz submodule
2023-04-07 15:09:28 -04:00
Alex Romero
ac1fc54909
add memory lock/unlock abilties to python windows meterpreter
2023-04-07 14:50:50 -04:00
Metasploit
dc4b9dff6b
Bump metasploit-payloads to 2.0.124
2023-04-07 08:45:40 -05:00
Spencer McIntyre
13a9d70e1d
Land #628 , add memory alloc/free to python
...
add memory alloc/free abilities to python windows meterpreter
2023-04-07 09:36:44 -04:00
Spencer McIntyre
71a78040ac
Fix a MinGW issue in the stdapi extension
...
The stdapi extension was using free() instead of FreeMibTable() to free
memory allocated GetIpForwardTable2() which lead to a crash when
compiled with MinGW.
2023-04-05 15:16:21 -04:00
Alex Romero
36bf125f7e
start efs service only in case no endpoint available, switch back to lsarpc for prior 22H2 versions
2023-03-28 15:20:02 -04:00
Alex Romero
e3a642848a
fix StubEfsRpcEncryptFileSrv function prototype
2023-03-24 07:06:35 -04:00
Alex Romero
0ed10329d7
use updated kiwi functions, bug fix version check, minor type fix
2023-03-23 04:28:12 -04:00
Alex Romero
0e5c950842
make use of service_wait_for_status() in service_stop function
2023-03-22 14:31:57 -04:00
Alex Romero
854bf651df
remove SetLastError() from service_query_status function
2023-03-22 14:15:51 -04:00
Alex Romero
5db46c6833
add service_wait_for_status function to services.c
2023-03-22 14:14:39 -04:00
Alex Romero
eb5b35ab24
display service name in debug output
2023-03-22 10:31:06 -04:00
Alex Romero
1c7a053927
add memory alloc/free abilties to python windows meterpreter
2023-03-22 09:50:18 -04:00
Alex Romero
29d6b43174
check service status periodically to avoid long sleep
2023-03-22 07:31:26 -04:00
Alex Romero
6cf1f5bd56
minor changes in services.c
2023-03-22 06:52:35 -04:00
Alex Romero
f260c5f4c7
fix access right issues in query_service_status() function
2023-03-18 16:21:03 -04:00
Alex Romero
65fbe56a12
add query_service_status() function
2023-03-18 03:55:20 -04:00
Alex Romero
f187c6a947
check efs service status before using interface and version check for prior 2008
2023-03-17 20:18:52 -04:00
Alex Romero
8e9e5675a6
support \pipe\efsrpc interface for windows 2008 in getsystem command
2023-03-17 17:25:44 -04:00
Alex Romero
4c27ff79ef
return result from trigger_efs_connection() in condition thread terminated
2023-03-17 15:14:12 -04:00
Alex Romero
03360b18a9
check for existence of \pipe\efsrpc
2023-03-16 18:11:10 -04:00
Alex Romero
c9d2e9f9ab
return RPC_S_CALL_FAILED and show error message on debug output
2023-03-14 18:26:31 -04:00
Grant Willcox
a906755628
Use proper file attributes and also allow sharing of the pipe so we don't block others
2023-03-14 12:39:14 -05:00
Grant Willcox
e6ee74a273
Rename function to does_pipe_exist and fix some typos
2023-03-14 12:05:18 -05:00
Alex Romero
e475e15ebf
fix for #608 issue in getsystem methods
2023-03-10 13:29:53 -05:00
Metasploit
cc34597728
Bump metasploit-payloads to 2.0.123
2023-03-09 08:24:18 -06:00
