David Maloney
2fa794f1c9
more cleanup/split up
...
split the date stuff up into their own subfunction tooo
MSP-12356
2015-05-06 14:00:15 -05:00
David Maloney
1daa927175
split off hash reading functions
...
moved the reading o the nt and lm hash records
into seperate sub functions. more cleanup/readability work
MSP-12356
2015-05-06 13:30:44 -05:00
David Maloney
bc5b6a1554
split off hash history reading
...
moved the hash history read into a seperate sub function
to make it easier to read
MSP-12356
2015-05-06 13:20:21 -05:00
David Maloney
879d062aa0
un typedef structs
...
bcook says to not typedef structs and just use them as
raw structs, so i have made that conversion here
MSP-12356
2015-05-06 11:24:06 -05:00
David Maloney
dff1a12c38
some more code cleanup
...
just some various bits and bobs here to make
the code a little cleaner and easier to read
MSP-12356
2015-05-06 10:42:03 -05:00
David Maloney
a8b4010ed0
cleanup #get_column_info a bit
...
bcook showed me how to do this the way i originally
wanted to but didn't know how. This is much cleaner to read
MSP-12356
2015-05-06 10:31:18 -05:00
David Maloney
df1181fe32
cleanup flag conversion
...
use simpler conversion of bit flags to
quasi-boolean values. just a little space saved and easier to read hopefully
MSP-12356
2015-05-06 09:54:36 -05:00
David Maloney
39d1860f7d
switch from malloc to calloc
...
calloc does our memory init for us
so all the malloc/memset usage was totally
redudnant
MSP-12356
2015-05-06 09:45:31 -05:00
David Maloney
9d1af4c696
add doxygen to new code
...
added doygen style comments to the new NTDS
functions and typedefs as requested by OJ.
MSP-12356
2015-05-05 13:32:32 -05:00
Brent Cook
c7617615e4
Land #155 , remove file and console output from kiwi
2015-05-04 15:10:16 -05:00
David Maloney
e0665a2ba5
add some additional function comments
...
add some basic function documentation in
the form of comments. not eprfect, but a start
on propper documentation
MSP-12356
2015-05-04 11:14:42 -05:00
David Maloney
dee9a5efab
some more code smell cleanup
...
bad memory cleanup issues around CAPI
and another constant for the length of a hash string
MSP-12356
2015-05-04 10:47:49 -05:00
David Maloney
8e93c26ce8
add constants for HASH Length
...
added constants for byte length of a hash
as well as athe null terminated length
MSP-12356
2015-05-04 10:41:48 -05:00
OJ
b5f5d0ae17
Remove console and file output from kiwi
...
This PR removes both log file and console output from kiwi. This is done so that those people who are unfortunate enough to migrate to a console app before running kiwi don't end up rendering all of the console output to a window that the user can see.
2015-05-04 09:14:37 +10:00
David Maloney
651e7a5135
Revert "Revert "Merge branch 'master' into feature/MSP-12356/ntds-parser""
...
This reverts commit 5a7d2ae84f830242486301cad0b26168f3ec973b.
2015-05-01 10:32:15 -05:00
David Maloney
a208343153
and again
...
another missing free
MSP-12356
2015-04-30 16:01:22 -05:00
David Maloney
c9cf6be97a
more memory cleanup
...
more missing free calls
MSP-12356
2015-04-30 15:43:58 -05:00
David Maloney
e2f4438dc4
do account reads in batches
...
a channel read on the ntds channel will now read
up to 20 accounts at a time. when we run out of accounts
we set the EOF flag to let the other side know
we are done
MSP-12356
2015-04-30 14:05:10 -05:00
David Maloney
8ff6ebab85
add channel close
...
the channel close will now initiate the jet engine
shutdown, and free the context
MSP-12356
2015-04-30 13:23:39 -05:00
David Maloney
5c1c9c317d
free the useraccount each time too
...
make sure we are doing good memory cleanup
MSP-12356
2015-04-30 13:18:55 -05:00
David Maloney
3ebf0513b0
properly cleanup memory around hash history
...
we were not freeing the buffers we created
as palceholders for decrypting hash history.
this would cause crashes when we wold start dealing
with multiple accounts in a row with a hash history.
freeing the buffers seems to fix the problem
MSP-12356
2015-04-30 13:15:17 -05:00
David Maloney
1612fce10c
Revert "Merge branch 'master' into feature/MSP-12356/ntds-parser"
...
This reverts commit 336fb48756942c73846f191135751e5d4e9b552d, reversing
changes made to be7e34858b88bbc816f208d16259b058c5819ad8.
2015-04-29 15:08:17 -05:00
David Maloney
6dc046eeea
Merge branch 'master' into feature/MSP-12356/ntds-parser
2015-04-28 08:23:17 -05:00
David Maloney
6914b3947a
move on to the next user each time
2015-04-24 13:33:37 -05:00
David Maloney
3bfeec2a7a
w00t pulled an account down
...
successfully pulled an account down over the chanel
MSP-12356
2015-04-24 13:04:36 -05:00
David Maloney
52571872c4
move to the first user record
...
move through the datatable until we find
the first sam user object.
MSP-12356
2015-04-23 16:51:07 -05:00
David Maloney
9d5c3c1610
pass CRYPT_VERIFYCONTEXT flag
...
not passing this flag was causing an error attempting
to open the keyset. by setting this we are telling the
CAPI that we only care about ephemeral keys, and so we don't
run into the container issues.
MSP-12356
2015-04-23 15:27:00 -05:00
David Maloney
ac0978abcd
attaching database correctly
...
we have the database attaching properly
seems to be an error decrypting the PEK though
MSP-12356
2015-04-23 14:43:28 -05:00
David Maloney
54b91aab08
clean build
...
the project now builds cleanly. the code isn't fully itnegrated
but it's in there and it builds which means it's nearly
perfect =P
MSP-12356
2015-04-23 11:53:33 -05:00
David Maloney
2769d986fe
migrate all the poc code in
...
all of the poc libs are migrated in,
compiler warnings are blocking compile at this moment
2015-04-23 10:39:25 -05:00
OJ
fe566d5f07
Moved transport stuff from core to metsrv
...
Lots of transported related things were in the core library which didn't make any sense given that the only thing that needed it was metsrv. This moves the functionality out into metsrv, reformats stuff and gets rid of some dead code.
TODO: Make this work with POSIX.
2015-04-23 19:41:25 +10:00
David Maloney
85987b9cbe
start migrating ntds code in
...
moving the code chunks from the poc into
the actual meterp project
2015-04-22 16:03:30 -05:00
David Maloney
b6d8909227
testing channel creation
...
just a simple test to make sure i
understand streampool channel creation
2015-04-21 09:45:30 -05:00
OJ
6de5738e21
Merge branch 'upstream/master' into cert-hash-switching
...
Conflicts:
source/server/server_setup_win.c - line endings
2015-04-08 08:10:10 +10:00
OJ
602715aaf8
Use group packets and add curlieeees
...
This commit just adds the braces around single-line blocks as per our "standard". This is important, especially in the case where those single lines contain macros which could expand to multiple lines.
Also added the use of the group packet functionality to make the search result code a little easier on the eye.
2015-04-07 10:02:41 +10:00
Brent Cook
21b4064a3d
normalize slashes, remove debug output
2015-04-06 07:47:27 -05:00
OJ
e9b7ec97c0
Implement support for ssl cert verify toggling
...
Querying of the status of SSL cert verification is now possible. This commit allows for this to be enabled and disabled on the fly.
2015-04-06 14:42:38 +10:00
Brent Cook
cc2dbb2045
use size_t for wcslen results
2015-04-05 20:45:52 -05:00
Brent Cook
b1dadbb98e
make search_all_drives a separate function
2015-04-05 18:41:02 -05:00
Brent Cook
5c16ddf270
avoid infinite recursion when encountering a bad symlink
...
reduce stack usage per level
2015-04-05 18:41:01 -05:00
Brent Cook
e1148a0bca
first working unicode search
...
refactor a few giant functions into smaller ones
2015-04-05 18:41:01 -05:00
Brent Cook
61b19560d7
cleanups, use utf8_to_wchar
2015-04-05 18:41:01 -05:00
Brent Cook
517dcfea05
convert wds queries to use unicode
2015-04-05 18:41:01 -05:00
Brent Cook
7e017d4771
move unicode helper functions to a common place
2015-04-05 18:36:36 -05:00
Brent Cook
69d6b48e67
normalize and tidy the code a bit
2015-04-05 18:36:36 -05:00
OJ
e2338709aa
POSIX transport refactoring
...
Still more to do here to support transport switching, but progress being
made.
2015-03-30 22:54:52 +10:00
OJ
33d7c55429
Land #138 : short file names, file list fixes
2015-03-19 13:03:27 +10:00
OJ
c93ba9608c
Fix bad POSIX support for stageless meterpreter
...
* Make sure POSIX has the new extension command enumeration function.
* Add support for deinit of extensions.
* Make sure extensions are tracked like they in Windows.
* Fix up a few export definitions.
* Stop using strncpy_s in POSIX code.
2015-03-19 11:07:22 +10:00
Brent Cook
eba69cf20e
add short name support to filesystem listing.
...
Also, fix path builder order for stat.
2015-03-18 16:05:30 -05:00
OJ
85783773d5
Land #137 : filesystem refactor and initial unicode support
2015-03-18 18:01:05 +10:00