Update secretsdump.py

This commit is contained in:
Deft_ 2024-10-21 17:56:48 +02:00 committed by GitHub
parent 08282a06d2
commit 15c26ceb84
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -238,4 +238,20 @@ class DonPAPIRemoteOperations:
# Now let's open the remote file, so it can be read later
self.logger.verbose(f"Downloading hive on share: {self.share_name} on filepath: {tmpFilePath}")
remoteFileName = RemoteFile(self.smb_connection, tmpFilePath, shareName=self.share_name)
return remoteFileName
return remoteFileName
def getDefaultLoginAccount(self):
try:
ans = rrp.hBaseRegOpenKey(self.__rrp, self.__regHandle, 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon')
keyHandle = ans['phkResult']
dataType, dataValue = rrp.hBaseRegQueryValue(self.__rrp, keyHandle, 'DefaultUserName')
username = dataValue[:-1]
dataType, dataValue = rrp.hBaseRegQueryValue(self.__rrp, keyHandle, 'DefaultDomainName')
domain = dataValue[:-1]
rrp.hBaseRegCloseKey(self.__rrp, keyHandle)
if len(domain) > 0:
return '%s\\%s' % (domain,username)
else:
return username
except:
return None