RepoMirrors
/
mimikatz
mirror of https://github.com/gentilkiwi/mimikatz
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
288 Commits 2 Branches 12 Tags 20 MiB
Commit Graph

21 Commits

Author SHA1 Message Date
Benjamin DELPY 57b7267c30 [new] module minidump supports stream size 
[new] module file read with FILE_SHARE_WRITE
[new] module crypto_sk for crypto with SecureKernel algorithms
[new] bcrypt lib to support BCryptKeyDerivation
[enhancement] LSAISO_DATA_BLOB structure & display
[experimental] sekurlsa::msv1_0 normalized structure for LsaIso
[experimental] sekurlsa::kerberos try to acquire session key from LsaIso
[experimental] sekurlsa::dpapi key from msv1_0 when LsaIso (not encrypted)
 2020-02-24 23:52:47 +01:00
Benjamin DELPY 78dba4ede9 [fix #118] Adding missing fltlib.lib to the solution 2017-12-21 02:30:19 +01:00
Benjamin DELPY 432276f23d mimikatz as a DLL, DLL delay loading for bcrypt/ncrypt, some crypto stuff... 2017-07-20 01:33:50 +02:00
Benjamin DELPY 9cd6a49e4c [new] lsadump::changentlm to *change* user password/hash to another password/hash 2017-06-08 00:48:55 +02:00
Benjamin DELPY f0bfb0da31 [enhancement] token: less listed (NtCompareTokens), more details in whoami 2017-03-28 04:22:57 +03:00
Benjamin DELPY 1722002956 [change] ts:: now uses only winsta API (instead of mix of wts32api and winsta) 
[new] rpc::connect support /null NTLM session for protseq ncacn_ip_tcp
 2017-03-20 04:37:36 +02:00
Benjamin DELPY b4f96ccb6c mimikatz 2.1.1 (rpc/service/process) 
[new] RPC support (client & server, multi users)
[new] Windows service support
[new] token::elevate can run process with impersonate token (when enough privileges and without interactions)
[new] process::run
[new] standard::hostname
 2017-03-19 17:03:54 +02:00
Benjamin DELPY ea674c5073 [internal] ASN.1 OID encode/decode 
[internal] MS-DSRS with OID instead of standard ATT only
[internal] MS-DRSR function IDL_DRSAddEntry
 2017-01-07 03:45:34 +01:00
Benjamin DELPY 58a73be753 lsadump::netsync to ask a DC to send current and previous NTLM hash of DC/SRV/WKS 
Lots of thanks to @asolino for his help!
 2016-05-25 00:18:52 +02:00
Benjamin DELPY c1c1608ca8 System Environment Variables & other stuff 
[new] System Environment Variables user module
[new] System Environment Variables kernel IOCTL for Set
[enhancement] privilege::sysenv
[enhancement] Busylight
[enhancement] misc::skeleton can avoid anti-AES patching for aware clients with /letaes
 2016-02-29 03:11:25 +01:00
Benjamin DELPY e15b0ca68a Some DPAPI stuff 
- [new] vault module now handles more Vault types, Attributes and Properties (with /attributes)
- [new] misc::compressme to create a compressed version of mimikatz
- [new] dpapi::cred now handles legacy (NT5) multiple credentials
- [new] dpapi::wifi & dpapi::wwan to deal with network profiles
- [internal] kuhl_m_vault: vault::list now deals with SID / credentials attributes (with one incorrect align.)
- [internal] kull_m_string: removed unused kull_m_string_suspectUnicodeStringStructure
- [internal] kull_m_string: added kull_m_string_printSuspectUnicodeString
- [internal] kull_m_string: added dirty kull_m_string_quickxml_simplefind
- [internal] kull_m_memory: quick compress & decompress routines
- [internal] kull_m_dpapi: added blob flags descriptions
- [internal] kull_m_dpapi: fixed blob protection flags description for system
- [internal] kull_m_dpapi: removed unused kull_m_dpapi_unprotect_backupkey_with_secret
- [internal] kull_m_cred: added legacy (NT5) credentials structures & routines
 2016-02-08 01:41:26 +01:00
Benjamin DELPY fbb32cdcfa MSV & Kerberos fixes, LSA and Privilege enhancements 
- [fix] sekurlsa::msv & mimilib for Windows 10 build 10586
- [fix #20] sekurlsa::tickets (display & export) for NT 6 != Windows 10
- [close #16] kerberos::golden now with ~NetBios name in LogonDomainName field of the PAC
- [new] privilege module shortcuts (driver, security, tcb, backup, restore) and functions (by id or name)
- [new] lsadump::dcsync and lsadump::lsa /inject 'NTLM-Strong-NTOWF' in Supplemental Credentials structures (Windows 2016 TP 4)
- [internal] NtSetSystemInformation can now be used in code
 2016-01-06 02:46:28 +01:00
Benjamin DELPY 71015c7081 mimikatz: updated to build with hid.lib 2015-11-09 23:45:49 +01:00
Benjamin DELPY 9bac6378c6 mimilove for Windows 2000 <3 2015-07-19 02:34:06 +02:00
Benjamin DELPY 627041252b DPAPI Backup keys export 2015-05-23 23:49:04 +02:00
Benjamin DELPY c85332baba minor file function change 2015-01-13 22:08:23 +01:00
Benjamin DELPY baf7785c9e ntdll.min.lib adjusted for RtlAnsiStringToUnicodeString 2014-11-21 00:18:57 +01:00
Benjamin DELPY 5d191619fc Microsoft BlueHat edition 
Windows 10 Technical Preview inside, but some kernel parts are missing
 2014-10-10 01:53:03 -07:00
Benjamin DELPY 21f1e25cc9 x64 srv lib no more needed 2014-05-25 21:40:31 +02:00
Benjamin DELPY 54502be4ca lsadump::lsa can play with AD supplementalCredentials, with mimilib.dll 2014-05-24 22:16:46 +02:00
Benjamin DELPY bb371c2acb Initial upload 2014-04-06 20:31:53 +02:00