40 Commits
Author SHA1 Message Date
Lee Chagolla-Christensen 4428263fe8 Merge pull request #36 from byinarie/patch-1
Update README.md indendation
2024-06-27 06:39:08 -07:00
Bebop79 7d744a7562 Update README.md 2024-06-05 16:40:23 -07:00
PJ 05d657ed7c Update README.md
fix markdown
2024-02-17 02:16:21 -06:00
Will a9649ad03b Renamed prekey to credkey
-Renamed `prekey` to `credkey` for accuracy
2023-12-14 15:40:20 -08:00
harmj0y 049f35e54b Update README.md 2023-12-14 14:48:31 -08:00
Will 709f9bca80 Update README 2023-12-14 14:41:08 -08:00
Lee Christensen 79f9e41dda Merge pull request #23 from ptr0x1/master
Added unprotect option for user certificates
2023-11-07 10:28:35 -08:00
Lee Christensen cda059a01c update docs 2023-11-07 10:17:08 -08:00
Lee Christensen d241fef22d update docs 2023-11-07 10:02:28 -08:00
ptr0x1 8cb5409f18 adding user-context unprotect option for certificates 2023-01-10 13:58:26 +00:00
Rich Warren af40c84336 Update README.md 2022-10-31 11:30:36 +00:00
harmj0y b04655375c Update README.md 2022-06-06 14:05:12 -07:00
harmj0y 9df99d44f5 Version 1.11.3
-Added ability to use "/password" with "/target" for masterkey command
-Small update to README
2022-06-06 14:02:46 -07:00
Duane Michael 899326d5f5 Update README.md 2022-05-16 23:58:49 -06:00
Duane Michael e46fbf62b4 Update README.md 2022-05-16 23:56:46 -06:00
Duane Michael 342ca71185 Added SCCM documentation to readme 2022-05-16 23:54:08 -06:00
Duane Michael e836a83439 Fixing 2022-05-16 23:49:13 -06:00
Duane Michael d3d0505c47 Added SCCM command which includes functionality to retrieve NAA blobs via WMI and decrypt using system master keys. 2022-05-16 23:41:21 -06:00
harmj0y a81031fe71 Version 1.11.1
-Default elevated SharpChrome triage behavior is to triage the current user unless additional masterkey material is supplied
-/target:X can now be a user folder
-Bug fixes
2021-03-05 09:55:28 -08:00
harmj0y 8730c3d670 Version 1.11.0
-Added "keepass" command
-Added "/entropy" flag to "blob" command
-Fix null byte bug
2021-03-01 13:55:21 -08:00
harmj0y 4425d8a595 Version 1.10.0
-CNG certificate private key support
-/nowrap added to `backupkey`
-key component error fix
-combined `machinecerts` to `certificates /machine`
-fixed SHA1 "hash" calculation for entropy
-only decrypted certs now display by default, `/showall` will show all
2021-02-25 10:37:37 -08:00
harmj0y 5964eebc3e Version 1.9.0
Added Chromium-based Edge support for SharpChrome
Added /consoleoutfile support for SharpDPAPI/SharpChrome
Added "statekeys" command to SharpChrome
Fixed SharpChrome cookie bug for expires times of 0
2020-09-02 14:14:09 -07:00
leechristensen d85391a2c6 update text/readme 2020-07-04 19:25:08 -07:00
leechristensen 8ed8953f2b Adding the search command 2020-07-04 17:29:35 -07:00
harmj0y ea8abe46f2 Version 1.7.0
-Landed @leftp's PR for user and machine certificate private key extraction
-Added cert triage to the "triage" and "machinetriage" commands
-Using /password:X now causes the DPAPI masterkey cache to be output
2020-05-06 12:29:35 -07:00
harmj0y 4662551256 Version 1.6.1
-Combined TriageUserMasterKeysWithPass into TriageUserMasterKeys
-'/password:X' now properly works in SharpDPAPI while elevated, as well as remotely
-'/password:X' now works for SharpChrome, elevated + remotely
2020-03-29 16:50:04 -07:00
harmj0y 3e95f5b37b Version 1.6.0
-Integrated new Chrome (v80+) AES statekey decryption from @djhohnstein's SharpChrome project.
-landed/expanded @lefterispan's PR that incorporates plaintext password masterkey decryption.
2020-03-27 15:03:09 -07:00
harmj0y f530523981 Version 1.5.1
-Timestamp parsing fix
-Added /setneverexpire flag for json cookie output
-misc small output tweaks
2019-12-18 12:04:31 -08:00
HarmJ0y c8563d31a6 Version 1.5.0
-Added *ps* command to decrypt exported PSCredential .xmls (thanks for the idea @gentilkiwi ;)
-Added README section for the *blob* command
-Misc. small output tweaks
2019-07-25 13:37:36 -07:00
HarmJ0y 9ac8f4b28a reorganized README 2019-05-23 09:54:29 -07:00
HarmJ0y 2e6ea8c140 updated README 2019-05-22 22:21:07 -07:00
HarmJ0y 88ea5f6dc5 1.3.0 Release
-Added **blob** function to describe a raw DPAPI blob
-Added **rdg** function to triage RDCMan.settings/.RDG files and decrypt any saved RDP passwords
-Added IsTextUnicode() for vault/credential/blob decryption display, showing hex if unicode is detected
-Added /target:C:\FOLDER\ option for the **masterkeys** function, for offline masterkey decryption
-Updated README
2019-05-09 12:27:44 -07:00
HarmJ0y b0663b4ccd -README clarifications
-Added HMAC verification to MasterKey decryption with sha hashes
2019-03-26 22:17:57 -04:00
HarmJ0y 5bc1c5169f updated README with more information 2019-03-25 15:12:16 -07:00
HarmJ0y 6388040a92 1.2.0 release (Troopers edition ;)
-Added remote server support for user triage functions
-Added machine triage (machinemasterkeys, machinecredentials, machinevaults, machinetriage)
-Expanded Vault credential format to handle vault credential clear attributes
-Expanded machine vault/credential search locations
-Broke out commands/files into the same general structure as Rubeus

P.S. this release was a huge PITA, hopefully it's appreciated ;)

Much <3 to @gentilkiwi for his excellent examples, and @tifkin_ for inspiring this work!
2019-03-24 22:12:45 -07:00
HarmJ0y 80f811de26 updated README for aggressor script 2019-03-15 15:56:03 -07:00
HarmJ0y cbb4d533fd updated README TOC 2019-03-15 02:04:07 -07:00
HarmJ0y cefb05ac4c updated README 2019-03-15 02:03:12 -07:00
HarmJ0y c3a8a15d6c Version 1.1.0 release.
See CHANGELOG for details.
2019-03-15 01:36:12 -07:00
HarmJ0y d4c8d39fd4 initial release 2018-08-22 13:46:15 -04:00