Caleb Stewart
6182cbbd14
Added updated connect logic to the connect command
...
Also added expanduser to ssh connection so `~` works in identity paths.
2021-06-07 16:27:52 -04:00
Caleb Stewart
f0ab2a024a
Fixed case when protocol was None
2021-06-07 16:22:06 -04:00
Caleb Stewart
91aba56195
Fix protocol parsing
...
The :// suffix wasn't being removed from the protocol and the host was
being parsed as an empty string instead of None when it wasn't
specified. This should fix #107 .
2021-06-07 16:17:58 -04:00
Caleb Stewart
2e0969ce8c
Added better documentation for implants
2021-06-06 23:57:54 -04:00
Caleb Stewart
9c7ccdad81
Merge pull request #105 from calebstewart/powershell-utilities
...
Windows Enumeration Modules
2021-06-06 23:07:05 -04:00
Caleb Stewart
7ca5d93c96
Added Schedule.NOSAVE enumeration schedule
2021-06-06 23:04:23 -04:00
Caleb Stewart
c03d6aaba5
Added wait and kill methods for enumerated processes
2021-06-06 22:18:12 -04:00
Caleb Stewart
95ba763202
Replaced tasklist with Get-WmiObject
...
This should speed up process enumeration from absolutely horrid to
mildly annoying.
2021-06-06 22:05:25 -04:00
Caleb Stewart
6c09643e74
Merge pull request #104 from calebstewart/issue-103-linux-enumerate-services
...
Replaced systemd service enumeration. Older systemd versions didn't support the arguments being used.
2021-06-05 16:39:52 -04:00
Caleb Stewart
377f948a93
Replaced systemd service enumeration
...
This version is compatible with update-to-date and older systemd as seen
in CentOS 7.9. Fixes #103 .
2021-06-05 16:10:07 -04:00
Caleb Stewart
1dcd58208b
Added user resoltion to group output
2021-06-05 14:57:02 -04:00
Caleb Stewart
2de02baee9
Added version tracking to c2 download
2021-06-05 14:10:20 -04:00
Caleb Stewart
111a3d2717
Merge branch 'master' into powershell-utilities
2021-06-05 04:38:01 -04:00
Caleb Stewart
0152ee6523
Ensured Individual Module Doesn't Break Enumeration
...
Fixes #102
2021-06-05 04:17:36 -04:00
John Hammond
23bead2220
Added installed programs enumeration and TODO's to fix csvreader parsing
2021-06-05 02:34:50 -04:00
Caleb Stewart
1c5bd273c5
Merge branch 'powershell-utilities' of github.com:calebstewart/pwncat into powershell-utilities
2021-06-05 02:13:33 -04:00
Caleb Stewart
b29f1adbe5
Added PowerSploit to source tree
2021-06-05 02:13:08 -04:00
Caleb Stewart
9670fa0fc3
Merge branch 'powershell-utilities' of github.com:calebstewart/pwncat into powershell-utilities
2021-06-05 01:55:45 -04:00
Caleb Stewart
686caba900
Added separate domain user and group enumerations
2021-06-05 01:55:22 -04:00
John Hammond
6d20153679
Added LSA protection enumeration module for Windows
2021-06-05 01:55:13 -04:00
John Hammond
37fdde3f69
Added Windows services enumeration module
2021-06-05 01:46:20 -04:00
Caleb Stewart
9c522b6997
Merge branch 'powershell-utilities' of github.com:calebstewart/pwncat into powershell-utilities
2021-06-05 01:32:24 -04:00
Caleb Stewart
5f0e4bb1c0
Added domain site and group enumerations
2021-06-05 01:32:05 -04:00
John Hammond
0ce37fbed7
Added environment variable enumeration module for Windows
2021-06-05 01:07:05 -04:00
John Hammond
f78dd52500
Merge branch 'powershell-utilities' of github.com:calebstewart/pwncat into powershell-utilities
2021-06-05 00:58:19 -04:00
John Hammond
2f1165bd06
Added AlwaysInstallElevated check in Windows enumeration
2021-06-05 00:57:56 -04:00
Caleb Stewart
063eecbbf8
Merge branch 'powershell-utilities' of github.com:calebstewart/pwncat into powershell-utilities
2021-06-05 00:44:49 -04:00
Caleb Stewart
bf5c1fd6cd
Added computer and file server enumerations
2021-06-05 00:43:47 -04:00
John Hammond
436c6616df
Added network shares as an enumeration module for Windows
2021-06-05 00:37:24 -04:00
John Hammond
95d7e393bc
Added processes enumeration for Windows
2021-06-05 00:10:23 -04:00
Caleb Stewart
895744a6bd
Added domain details enumeration
2021-06-04 23:16:38 -04:00
John Hammond
b6681a9d56
Added an antivirus enumeration for Windows
2021-06-04 23:09:56 -04:00
John Hammond
500138569c
Added hotfixes and mounted drives enuemration modules
2021-06-04 22:50:37 -04:00
John Hammond
3f360149e6
Added a Windows UAC enumeration module
2021-06-04 21:55:07 -04:00
Caleb Stewart
97cf14d314
Fixed windows interactive exit failures
2021-06-04 21:48:43 -04:00
John Hammond
5bcb7e04fc
Merge branch 'master' into powershell-utilities
2021-06-04 21:17:37 -04:00
John Hammond
6cce810855
Started windows UAC enumeration
2021-06-04 21:16:24 -04:00
Caleb Stewart
084c98744d
Added Domain User Enumeration
...
Fixed PowerShell error catching also
2021-06-04 21:12:05 -04:00
Caleb Stewart
96b26f6f23
Merge pull request #101 from calebstewart/powershell-utilities
...
Powershell utilities
- bloodhound module
- defender status enumeration
2021-06-04 20:26:29 -04:00
John Hammond
b545943523
Added a "protections" enumeration folder for Windows Defender
2021-06-04 20:22:21 -04:00
John Hammond
0b3dd372c8
Added convenience functions in Windows to check "is_admin" or "is_system"
2021-06-04 19:08:53 -04:00
Caleb Stewart
4709bfb513
Fixed output path for bloodhound
...
Tested on domain-joined Windows 10 machine. Requires Defender to be
switched off.
2021-06-04 17:17:18 -04:00
Caleb Stewart
98ede71bf8
Removed info tag; looks better during initializing
2021-06-04 15:16:29 -04:00
Caleb Stewart
e456b2c1e1
Added upgrading from sh to bash
...
Also added color removal if we end up on a raw /bin/sh due to
lack of /bin/bash.
2021-06-04 15:15:05 -04:00
Caleb Stewart
69ce7d0d4f
updated bloodhound module
2021-06-04 15:10:23 -04:00
Caleb Stewart
5d0c8c390d
Fixed formatting of docstring because i big dum
2021-06-03 23:15:30 -04:00
Caleb Stewart
ac4a522a44
Added bloodhound module
...
NOTE: updated pwncat-windows-c2 address due to changes in powershell
command API. You must updated your C2 before using this change.
2021-06-03 23:12:22 -04:00
Caleb Stewart
b787772c68
Added powersploit module
...
This should cover all of the powersploit PowerShell scripts available on
the Github repository. They're loaded in groups, but individual scripts
could still be loaded by URL w/ `manage.powershell.import` if needed.
2021-06-03 21:58:16 -04:00
Caleb Stewart
8773c64afb
Merge pull request #99 from calebstewart/issue-98-sudo-version
...
Fixed sudo version enumeration
2021-06-03 14:55:51 -04:00
Caleb Stewart
5cbe311229
Fixed sudo version enumeration
...
The root of this problem was a typo: missing square braces around
enumeration. However, it also shouldn't have been raising a module
failed error in that case.
After fixing that problem, I found a few more bugs while testing
with Metasploitable2, so I fixed those:
- Added small sleeps in escalation to let the shell keep up
- stat behaves oddly, so added a loop to retry on parsing failure
- Fixed the **syntax** of the mtr gtfobins payload
- Fixed the nmap gtfobins payload
The mtr gtfobins payload is still not right, as it is unable to
read files as it should, but I'll work on that moving forward.
For now, there are no exceptions and escalation is working properly
through `nmap`.
2021-06-03 13:21:42 -04:00
