cod
446b4d18c3
typo in context
2024-08-12 16:03:55 +02:00
cod
3332a27af8
typo
2024-08-01 09:03:54 +02:00
Spencer McIntyre
52d58af59a
Update mimikatz to 45c42c71
2024-01-30 16:30:26 -05:00
Christophe De La Fuente
c7abd47585
Update the ReflectiveDLLInjection submodule to the upstream repository
2024-01-19 17:43:25 +01:00
Christophe De La Fuente
83fa146f75
Update ReflectiveDLLInjection submodule to pull in new trampoline detection logic
2024-01-16 18:27:36 +01:00
Christophe De La Fuente
1556007bfd
Update ReflectiveDLLInjection submodule to pull in Win10/8 x86 fix
2024-01-12 19:24:01 +01:00
Christophe De La Fuente
a5e33d167d
Remove include DirectSyscall.c
2024-01-10 15:01:19 +01:00
Christophe De La Fuente
7082431dae
Pull in changes from ReflectiveDLLInjection to support direct syscalls
...
- Includes ColdGate.c in each project
- Change railgun macro name to stdcall_func
- Update VS configs
- Update cmake files for mingw
- Fix cmake files for kiwi builds
- Update ReflectiveDLLInjection module to verify if CI passes
- Update include file names & ReflectiveDLLInjection submodule
2024-01-08 18:53:17 +01:00
sjanusz-r7
aeb6945bd2
Fix incorrect Memory Search variable name
2024-01-08 10:10:16 +00:00
sjanusz-r7
4f19a1c4ae
Fix Memory Search variable shadowing
2024-01-04 16:34:08 +00:00
sjanusz-r7
92d04de09c
Add maximum match length limit to regex matcher
2023-12-11 14:06:32 +00:00
sjanusz-r7
8f51ee7e6d
Move defs to top of file, remove pointer-to-pointer, make RegexNeedle contain static-size arrays
2023-12-11 14:06:32 +00:00
sjanusz-r7
72b39289d0
Compile regex in-place, rename CHAR to CHAR_RE due to Windows typedef'ing CHAR, correctly free compiled needle and associated buffer
2023-12-11 14:06:32 +00:00
sjanusz-r7
6e2889d64c
Add Windows Memory Search support using regex
2023-12-11 14:06:30 +00:00
Spencer McIntyre
4e789ee80f
Identify Windows Server 2003 as well
2023-11-29 15:56:38 -05:00
Spencer McIntyre
6bedffb29a
Add version detection for newer Windows
...
Add version detection by checking the build number for Server 2019,
Server 2022 and Windows 11.
2023-11-28 13:32:34 -05:00
Grant Willcox
2e97a96c1f
Merge pull request #666 , Update extapi OpenClipboard to support retrying if acquiring the lock failed
2023-06-28 17:33:31 -05:00
Grant Willcox
e5d546a17a
Improve description of open_clipboard_with_retries
2023-06-28 10:53:47 -05:00
adfoster-r7
475a7df4c1
Update extapi OpenClipboard to support retrying failing to acquire the lock
2023-06-27 22:42:58 +01:00
adfoster-r7
bb662d67ff
Fix broken readme code snippets
2023-06-26 13:23:13 +01:00
adfoster-r7
3d6c8105be
Land #661 , update install instructions
2023-06-21 22:58:27 +01:00
Zach Goldman
317c45b158
Update c/meterpreter/README.md
...
change 2019 filename to 2017
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com>
2023-06-21 14:38:49 -04:00
Spencer McIntyre
0404af93b6
Land #662 , Fix getenv bug for missing var
...
fix bug where env lookups not found return garbage
2023-06-20 14:48:41 -04:00
Zach Goldman
f193fe4c9e
Remove unnecessary second error check in env variable lookup
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com>
2023-06-20 10:24:38 -04:00
Ashley Donaldson
0ebf3a90fc
Switch to always using STARTUPINFOEXW
2023-06-19 06:52:32 +10:00
Zach Goldman
afecfab444
update 2017 section as well
2023-06-15 16:35:12 -05:00
Zach Goldman
670fd695cc
fix bug where env lookups not found return garbage
2023-06-15 16:33:37 -05:00
Zach Goldman
52c8737f28
update install instructions with proper path
2023-06-15 15:37:53 -05:00
Ashley Donaldson
031f481212
Re-add memory handling for commandLine_w variable.
2023-06-15 08:56:47 +10:00
Ashley Donaldson
830b4f801a
Revert "fix free() process.execute wchars"
...
This reverts commit be443779ff
2023-06-15 08:56:47 +10:00
Ashley Donaldson
194a5a83b6
Fix double-free in free.
...
Also removed TLV size parameter, which (according to MSDN) can never have any
value other than 0 with MEM_RELEASE.
2023-06-08 14:33:40 +10:00
saim1z
bdd2885571
remove TLV_TYPE_TOKEN_UPDATE_RESULT and unnecessary code
2023-05-24 16:18:43 +02:00
saim1z
4913a7f783
moved COMMAND_ID_STDAPI_SYS_CONFIG_UPDATE_TOKEN with the others COMMAND_ID_STDAPI_SYS_CONFIG* definitions
2023-05-24 15:35:23 +02:00
saim1z
bc341d1ae9
add update_token function to stdapi
2023-05-24 11:01:13 +02:00
Spencer McIntyre
d5a325895d
Update the MinGW builds
2023-04-27 10:53:17 -04:00
Spencer McIntyre
1c4f2df278
Use dump_sam for WOW64 support
...
Switch to using the dump_sam RDLL for x86, WOW64 and x64 hashdump
support.
2023-04-27 09:52:50 -04:00
Spencer McIntyre
d64c312029
Update the signature for inject_dll
...
Need to be able to pass things that are not strings
2023-04-27 09:52:50 -04:00
Spencer McIntyre
d114f5ec0a
Add the dump_sam project
...
This is going to build a stand-alone RDLL that can be injected into
LSASS for hashdump.
The samsrv.dll functions still need to be resolved because they're not
exported but the rest can be used normally thanks to the RDLL loader.
Defined 32-bit and 64-bit structures that are compatible with MSVC and
MinGW. DLLs are dynamically linked for size and the Visual-C Runtime is
not used.
The reflectively loaded DLL is freed once the operation has completed.
2023-04-27 09:52:50 -04:00
bwatters-r7
d83c7b4e73
Land #630 , Fix a MinGW issue in the stdapi extension
...
Merge branch 'land-630' into upstream-master
2023-04-20 17:54:35 -05:00
adfoster-r7
41e7a26c77
Fix debug logging for Windows 7
2023-04-19 16:28:03 +01:00
Spencer McIntyre
53467c9b7b
Filter out systems older than Windows 6.0
...
XP SP 2 does not work and while technically XP SP 3 does, they share the
same version information. This takes a conservative approach and
prevents running on XP at all to ensure the session won't crash.
2023-04-07 16:33:42 -04:00
Spencer McIntyre
0aeeeee56f
Cleanup things up a bit
...
* Simplify pipe selection logic
* Make the version check more strict
* Remove debug messages from release builds
2023-04-07 15:09:28 -04:00
Spencer McIntyre
c1e522f102
Update the mimikatz submodule
2023-04-07 15:09:28 -04:00
Spencer McIntyre
71a78040ac
Fix a MinGW issue in the stdapi extension
...
The stdapi extension was using free() instead of FreeMibTable() to free
memory allocated GetIpForwardTable2() which lead to a crash when
compiled with MinGW.
2023-04-05 15:16:21 -04:00
Alex Romero
36bf125f7e
start efs service only in case no endpoint available, switch back to lsarpc for prior 22H2 versions
2023-03-28 15:20:02 -04:00
Alex Romero
e3a642848a
fix StubEfsRpcEncryptFileSrv function prototype
2023-03-24 07:06:35 -04:00
Alex Romero
0ed10329d7
use updated kiwi functions, bug fix version check, minor type fix
2023-03-23 04:28:12 -04:00
Alex Romero
0e5c950842
make use of service_wait_for_status() in service_stop function
2023-03-22 14:31:57 -04:00
Alex Romero
854bf651df
remove SetLastError() from service_query_status function
2023-03-22 14:15:51 -04:00
Alex Romero
5db46c6833
add service_wait_for_status function to services.c
2023-03-22 14:14:39 -04:00
