Lee Chagolla-Christensen
4428263fe8
Merge pull request #36 from byinarie/patch-1
...
Update README.md indendation
2024-06-27 06:39:08 -07:00
Lee Chagolla-Christensen
bfabd48889
Merge pull request #39 from Bebop79/master
...
Update README.md blog URLs
2024-06-27 06:37:36 -07:00
Lee Chagolla-Christensen
a2f8017972
Merge pull request #40 from atticuss-sra/chrome_bugfix
...
Chrome State Key Parsing Bugfix
2024-06-27 06:36:01 -07:00
Jonn Callahan
712fb88adc
fix chrome parsing issue
2024-06-21 11:11:47 +00:00
Bebop79
7d744a7562
Update README.md
2024-06-05 16:40:23 -07:00
Will
7eecafe4ac
Merge pull request #37 from subat0mik/master
...
Fixed crypto API exceptions and bypassed FIPS enforcement
2024-02-23 17:14:36 -08:00
Duane Michael
d1a048c8f9
Changed uses of the *CryptoServiceProvider classes to *Managed in lib\Triage.cs
2024-02-22 13:31:37 -07:00
Duane Michael
8e805cef8c
Changed uses of the *CryptoServiceProvider class to *Managed in lib\Dpapi.cs
2024-02-22 13:30:31 -07:00
Duane Michael
59fc248830
Changed uses of the (CryptoServiceProvider classes to *Managed in lib\Crypto.cs
2024-02-22 13:28:40 -07:00
Duane Michael
a095233577
Changed uses of the AesCryptoServiceProvider class to AesManaged in the sqllite crypto.cs
2024-02-22 13:24:11 -07:00
Duane Michael
10a00700b8
Addressed FIPS issues by not enforcing FIPS policy in app.config
2024-02-22 13:21:06 -07:00
Duane Michael
1ee41c905f
Changed LSAAESDecrypt to use the AesManaged class instead of AesCryptoServiceProvider
2024-02-22 13:13:12 -07:00
PJ
05d657ed7c
Update README.md
...
fix markdown
2024-02-17 02:16:21 -06:00
Will
a9649ad03b
Renamed prekey to credkey
...
-Renamed `prekey` to `credkey` for accuracy
2023-12-14 15:40:20 -08:00
harmj0y
049f35e54b
Update README.md
1.12.0
2023-12-14 14:48:31 -08:00
Will
709f9bca80
Update README
2023-12-14 14:41:08 -08:00
harmj0y
1bc590277e
Update CHANGELOG
...
-Update CHANGELOG
-Update usage for both projects
2023-12-14 14:23:10 -08:00
Will
e410f19ba9
Merge pull request #35 from GhostPack/local-sha1
...
Added support for local prekey
2023-12-14 14:03:24 -08:00
Will
3dcfce2960
Added support for local prekey
...
-Added support for local prekey
2023-12-14 14:03:05 -08:00
Will
1e15a52aa6
Merge pull request #34 from GhostPack/Version-1.12.0
...
Version 1.12.0
2023-12-14 13:26:10 -08:00
Will
670f2155da
Merge branch 'master' into Version-1.12.0
2023-12-14 13:25:28 -08:00
Will
f81707ef78
Merge branch 'pr/31'
2023-12-14 13:22:22 -08:00
Will
8c9502aa2a
Merge branch 'master' into pr/22
2023-12-14 13:20:27 -08:00
Will
b3482343ec
Start of version 1.12.0
...
-Start of version 1.12.0
-Implemented masterkey decryption with the prekey
-Standardized arguments across commands
2023-12-13 18:03:56 -08:00
Lee Christensen
225a1fdcd7
loosen access/sharing when trying to read files
2023-11-09 15:50:56 -08:00
Lee Christensen
79f9e41dda
Merge pull request #23 from ptr0x1/master
...
Added unprotect option for user certificates
2023-11-07 10:28:35 -08:00
Lee Christensen
54bb9f87a4
Merge pull request #29 from 001SPARTaN/master
...
Swapped Managed API usage for their CryptoServiceProvider alternatives
2023-11-07 10:26:35 -08:00
Lee Christensen
b706ee51ac
Merge pull request #32 from GhostPack/localstatefile
...
add ability to specify local state file and slack support for statekeys/cookies
2023-11-07 10:25:19 -08:00
Lee Christensen
cda059a01c
update docs
2023-11-07 10:17:08 -08:00
Lee Christensen
4844a0fd79
added slack support to statekeys/cookies commands
2023-11-07 10:10:34 -08:00
Lee Christensen
d241fef22d
update docs
2023-11-07 10:02:28 -08:00
Lee Christensen
70ee50ce83
add ability to specify local state file
2023-11-06 17:17:08 -08:00
clod
421357327c
When running as local admin and getting the hashes of all masterkeys for all the users, the SID of the user now matches the right one
2023-10-30 17:45:49 +13:00
Calvin Hedler
a76e5e8f5b
Swapped Managed API usage for their CryptoServiceProvider alternatives to solve issues on systems with 'Use FIPS compliant algorithms for encryption, hashing, and signing' enabled.
2023-08-28 11:54:07 -07:00
Will
02992ff2c5
Merge pull request #25 from djhohnstein/master
...
SameSite, Secure, HttpOnly, and EditThisCookie Format
2023-04-21 11:58:40 -07:00
Will
82e8f94c11
Merge pull request #27 from Kiblyn11/feat/masterkeyRpc
...
Add "/rpc" flag to ask domain controller to decrypt user master key for us
2023-04-18 15:53:02 -07:00
Kiblyn11
df4f8836d5
doc and cleanup
2023-03-28 23:55:36 +02:00
Kiblyn11
dffd58325a
Cleanup
2023-03-24 18:37:32 +01:00
unknown
578fe6e35d
Add /rpc flag to allow users to resquest domain controller to decrypt masterkeys in a domain
2023-03-24 18:22:26 +01:00
Dwight Hohnstein
067535dd6c
misc attributes properly pulled for some relevant cookie fields. updating to latest version of editthiscookie format.
2023-02-02 09:46:03 -08:00
ptr0x1
8cb5409f18
adding user-context unprotect option for certificates
2023-01-10 13:58:26 +00:00
Franci Šacer
c8110790a0
Add Teams statekey support
...
The current implementation of the statekeys command in SharpChrome does not take into account the target parameter, so it just iterates through known paths. This commit adds quick support for the Microsoft Teams state file.
2023-01-06 13:06:50 +01:00
Will
f75ab5af85
Backupkey now not line wrapped
...
Backupkey now not line wrapped
2022-12-22 11:58:22 -08:00
Will
2677293c9b
Merge pull request #19 from rxwx/master
...
Some masterkey features/improvements
2022-12-09 01:54:47 -08:00
Lee Christensen
7ff2537873
support additional string types + code cleanup
2022-11-17 03:28:33 -08:00
Lee Christensen
4983bad2a0
Merge pull request #17 from guervild/object_data_sccm
...
[SCCM] Credentials from objects.data
2022-11-17 01:02:27 -08:00
guervild
3322dbfee1
Fixed regex
...
Signed-off-by: guervild <[email protected] >
2022-11-16 23:51:19 +01:00
Rich Warren
af40c84336
Update README.md
2022-10-31 11:30:36 +00:00
rxwx
4ffd2bd7ec
* Added option to dump masterkey hashes in john/hashcat format.
...
* Added parsing of Preferred file to highlight current master key(s)
* Added auto extraction of SID using BK file or path when /server is specified
2022-10-31 10:50:40 +00:00
rxwx
a88f7acdca
Fixed bug in SID extraction. This should probably be moved to its own function that also tries to extract from the BK file
2022-10-31 09:05:44 +00:00