112 Commits
Author SHA1 Message Date
Lee Chagolla-Christensen 4428263fe8 Merge pull request #36 from byinarie/patch-1
Update README.md indendation
2024-06-27 06:39:08 -07:00
Lee Chagolla-Christensen bfabd48889 Merge pull request #39 from Bebop79/master
Update README.md blog URLs
2024-06-27 06:37:36 -07:00
Lee Chagolla-Christensen a2f8017972 Merge pull request #40 from atticuss-sra/chrome_bugfix
Chrome State Key Parsing Bugfix
2024-06-27 06:36:01 -07:00
Jonn Callahan 712fb88adc fix chrome parsing issue 2024-06-21 11:11:47 +00:00
Bebop79 7d744a7562 Update README.md 2024-06-05 16:40:23 -07:00
Will 7eecafe4ac Merge pull request #37 from subat0mik/master
Fixed crypto API exceptions and bypassed FIPS enforcement
2024-02-23 17:14:36 -08:00
Duane Michael d1a048c8f9 Changed uses of the *CryptoServiceProvider classes to *Managed in lib\Triage.cs 2024-02-22 13:31:37 -07:00
Duane Michael 8e805cef8c Changed uses of the *CryptoServiceProvider class to *Managed in lib\Dpapi.cs 2024-02-22 13:30:31 -07:00
Duane Michael 59fc248830 Changed uses of the (CryptoServiceProvider classes to *Managed in lib\Crypto.cs 2024-02-22 13:28:40 -07:00
Duane Michael a095233577 Changed uses of the AesCryptoServiceProvider class to AesManaged in the sqllite crypto.cs 2024-02-22 13:24:11 -07:00
Duane Michael 10a00700b8 Addressed FIPS issues by not enforcing FIPS policy in app.config 2024-02-22 13:21:06 -07:00
Duane Michael 1ee41c905f Changed LSAAESDecrypt to use the AesManaged class instead of AesCryptoServiceProvider 2024-02-22 13:13:12 -07:00
PJ 05d657ed7c Update README.md
fix markdown
2024-02-17 02:16:21 -06:00
Will a9649ad03b Renamed prekey to credkey
-Renamed `prekey` to `credkey` for accuracy
2023-12-14 15:40:20 -08:00
harmj0y 049f35e54b Update README.md 1.12.0 2023-12-14 14:48:31 -08:00
Will 709f9bca80 Update README 2023-12-14 14:41:08 -08:00
harmj0y 1bc590277e Update CHANGELOG
-Update CHANGELOG
-Update usage for both projects
2023-12-14 14:23:10 -08:00
Will e410f19ba9 Merge pull request #35 from GhostPack/local-sha1
Added support for local prekey
2023-12-14 14:03:24 -08:00
Will 3dcfce2960 Added support for local prekey
-Added support for local prekey
2023-12-14 14:03:05 -08:00
Will 1e15a52aa6 Merge pull request #34 from GhostPack/Version-1.12.0
Version 1.12.0
2023-12-14 13:26:10 -08:00
Will 670f2155da Merge branch 'master' into Version-1.12.0 2023-12-14 13:25:28 -08:00
Will f81707ef78 Merge branch 'pr/31' 2023-12-14 13:22:22 -08:00
Will 8c9502aa2a Merge branch 'master' into pr/22 2023-12-14 13:20:27 -08:00
Will b3482343ec Start of version 1.12.0
-Start of version 1.12.0
-Implemented masterkey decryption with the prekey
-Standardized arguments across commands
2023-12-13 18:03:56 -08:00
Lee Christensen 225a1fdcd7 loosen access/sharing when trying to read files 2023-11-09 15:50:56 -08:00
Lee Christensen 79f9e41dda Merge pull request #23 from ptr0x1/master
Added unprotect option for user certificates
2023-11-07 10:28:35 -08:00
Lee Christensen 54bb9f87a4 Merge pull request #29 from 001SPARTaN/master
Swapped Managed API usage for their CryptoServiceProvider alternatives
2023-11-07 10:26:35 -08:00
Lee Christensen b706ee51ac Merge pull request #32 from GhostPack/localstatefile
add ability to specify local state file and slack support for statekeys/cookies
2023-11-07 10:25:19 -08:00
Lee Christensen cda059a01c update docs 2023-11-07 10:17:08 -08:00
Lee Christensen 4844a0fd79 added slack support to statekeys/cookies commands 2023-11-07 10:10:34 -08:00
Lee Christensen d241fef22d update docs 2023-11-07 10:02:28 -08:00
Lee Christensen 70ee50ce83 add ability to specify local state file 2023-11-06 17:17:08 -08:00
clod 421357327c When running as local admin and getting the hashes of all masterkeys for all the users, the SID of the user now matches the right one 2023-10-30 17:45:49 +13:00
Calvin Hedler a76e5e8f5b Swapped Managed API usage for their CryptoServiceProvider alternatives to solve issues on systems with 'Use FIPS compliant algorithms for encryption, hashing, and signing' enabled. 2023-08-28 11:54:07 -07:00
Will 02992ff2c5 Merge pull request #25 from djhohnstein/master
SameSite, Secure, HttpOnly, and EditThisCookie Format
2023-04-21 11:58:40 -07:00
Will 82e8f94c11 Merge pull request #27 from Kiblyn11/feat/masterkeyRpc
Add "/rpc" flag to ask domain controller to decrypt user master key for us
2023-04-18 15:53:02 -07:00
Kiblyn11 df4f8836d5 doc and cleanup 2023-03-28 23:55:36 +02:00
Kiblyn11 dffd58325a Cleanup 2023-03-24 18:37:32 +01:00
unknown 578fe6e35d Add /rpc flag to allow users to resquest domain controller to decrypt masterkeys in a domain 2023-03-24 18:22:26 +01:00
Dwight Hohnstein 067535dd6c misc attributes properly pulled for some relevant cookie fields. updating to latest version of editthiscookie format. 2023-02-02 09:46:03 -08:00
ptr0x1 8cb5409f18 adding user-context unprotect option for certificates 2023-01-10 13:58:26 +00:00
Franci Šacer c8110790a0 Add Teams statekey support
The current implementation of the statekeys command in SharpChrome does not take into account the target parameter, so it just iterates through known paths. This commit adds quick support for the Microsoft Teams state file.
2023-01-06 13:06:50 +01:00
Will f75ab5af85 Backupkey now not line wrapped
Backupkey now not line wrapped
2022-12-22 11:58:22 -08:00
Will 2677293c9b Merge pull request #19 from rxwx/master
Some masterkey features/improvements
2022-12-09 01:54:47 -08:00
Lee Christensen 7ff2537873 support additional string types + code cleanup 2022-11-17 03:28:33 -08:00
Lee Christensen 4983bad2a0 Merge pull request #17 from guervild/object_data_sccm
[SCCM] Credentials from objects.data
2022-11-17 01:02:27 -08:00
guervild 3322dbfee1 Fixed regex
Signed-off-by: guervild <[email protected]>
2022-11-16 23:51:19 +01:00
Rich Warren af40c84336 Update README.md 2022-10-31 11:30:36 +00:00
rxwx 4ffd2bd7ec * Added option to dump masterkey hashes in john/hashcat format.
* Added parsing of Preferred file to highlight current master key(s)
* Added auto extraction of SID using BK file or path when /server is specified
2022-10-31 10:50:40 +00:00
rxwx a88f7acdca Fixed bug in SID extraction. This should probably be moved to its own function that also tries to extract from the BK file 2022-10-31 09:05:44 +00:00