mirror of
https://github.com/login-securite/DonPAPI
synced 2025-03-11 06:58:49 +00:00
Update secretsdump.py
This commit is contained in:
parent
08282a06d2
commit
15c26ceb84
@ -238,4 +238,20 @@ class DonPAPIRemoteOperations:
|
||||
# Now let's open the remote file, so it can be read later
|
||||
self.logger.verbose(f"Downloading hive on share: {self.share_name} on filepath: {tmpFilePath}")
|
||||
remoteFileName = RemoteFile(self.smb_connection, tmpFilePath, shareName=self.share_name)
|
||||
return remoteFileName
|
||||
return remoteFileName
|
||||
|
||||
def getDefaultLoginAccount(self):
|
||||
try:
|
||||
ans = rrp.hBaseRegOpenKey(self.__rrp, self.__regHandle, 'SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon')
|
||||
keyHandle = ans['phkResult']
|
||||
dataType, dataValue = rrp.hBaseRegQueryValue(self.__rrp, keyHandle, 'DefaultUserName')
|
||||
username = dataValue[:-1]
|
||||
dataType, dataValue = rrp.hBaseRegQueryValue(self.__rrp, keyHandle, 'DefaultDomainName')
|
||||
domain = dataValue[:-1]
|
||||
rrp.hBaseRegCloseKey(self.__rrp, keyHandle)
|
||||
if len(domain) > 0:
|
||||
return '%s\\%s' % (domain,username)
|
||||
else:
|
||||
return username
|
||||
except:
|
||||
return None
|
||||
|
Loading…
Reference in New Issue
Block a user