Commit Graph

20 Commits

Author SHA1 Message Date
Benjamin DELPY fa42ed93aa [new] mimikatz lsadump::postzerologon, to reinit DC password both in local store and AD
[change] https instead of http for blog :)
2020-09-17 03:17:11 +02:00
Benjamin DELPY c832504acd Crypto, crypto everywhere
[new] crypto::capi patch DSS CSP (experimental)
[new] crypto::keys export DSA, EC keys
[new] crypto::kutil import PEM, DER, PKCS#8, CAPI blob & CNG blob when possible, convert it to PKCS#8, or make a PKCS#12 with a PEM or DER certificate
[new] dpapi::capi & dpapi::cng export private keys in PVK format for legacy (RSA & DSA) or PKCS#8 for others (like EC)
[new] crypto:: & dpapi:: keys & cert functions with more informations
2020-01-02 19:31:05 +01:00
Benjamin DELPY b008188f9f Big update :)
[new] mimikatz & mimilib **very** experimental support for ARM64
[better] code for Mifare protocol
[better] code for sekurlsa WinDBG plugin (credential keys, still not good enough)
[new] mimilib sub authentication package for @vletoux with 'bad password knocking' and magic password
[new] mimikatz: unmarshalling usernames when marshalled
[fix] mimikatz SR98/RDM/Busylight could previously crash
[fix #184] again and again ;)
[fix #172] swscanf_s VS ARRAYSIZE macro
[fix #127] stdout/stdin/stderr vs modern Visual Studio and Windows XP support (thank you @Crypt0-M3lon)
[code] refactor for defined / !defined
2019-03-25 01:57:56 +01:00
Benjamin DELPY 56d9db738a Vegas Edition
[new] lsadump::dchadow updates (linger, new helpers, fixes)
[new] ACR & PN532 module
2018-08-14 13:13:03 -07:00
Benjamin DELPY 0798214d73 [new] dpapi::ssh from an idea of @ropnop and for Tal Be'ery
[fix] sr98::raw blocks array (fix #149 - thank you @steelfly33)
2018-05-26 01:42:20 +02:00
Benjamin DELPY a0f243b335 [fix] don't ask me why, but fixing previous SVN commit 2018-04-24 01:23:31 +02:00
Benjamin DELPY b4f96ccb6c mimikatz 2.1.1 (rpc/service/process)
[new] RPC support (client & server, multi users)
[new] Windows service support
[new] token::elevate can run process with impersonate token (when enough privileges and without interactions)
[new] process::run
[new] standard::hostname
2017-03-19 17:03:54 +02:00
Benjamin DELPY 345db5ada5 Harmonization mimikatz<->kekeo 2017-02-27 03:18:46 +02:00
Benjamin DELPY cf30c6396e Global update with few things
[net] List network sessions & user sessions to a server
[internal] arguments default behavior can NULL a value
2017-02-26 03:10:41 +02:00
Benjamin DELPY 823d376d80 Anniversary update
[new] mimikatz lsadump::sam ready for Windows 10 14393 (AES128 encryption)
[new] mimikatz sekurlsa::* ready for Windows 10 14393
[fix] mimikatz lsadump::sam (handle double free)
[new] mimilib WinDBG mimikatz plugin ready for Windows 10 14393
2016-08-08 03:35:01 +02:00
Benjamin DELPY 6498084fba [mimikatz/mimilib] RPC cleaning, new CredentialKeys format string 2016-07-31 02:02:19 +02:00
Benjamin DELPY 9e298f16e4 Welcom to Windows 10 LTSB & current
[remove] mimidrv & mimikatz kernel module: Process & Object callbacks remover are not anymore in the program
[internal] Windows 10 is now splitted in 1507 (LTSB) and 1511 (current)
[internal] mimidrv: Windows 10 support added
[internal] mimilib WinDBG module & mimikatz::sekurlsa: Windows 10 MSV / Kerberos Tickets are not specific anymore (offsets table)
[internal] Using KULL_M_MEMORY_GLOBAL_OWN_HANDLE instead of local variable in each function
2016-03-27 19:22:36 +02:00
Benjamin DELPY f114a779e3 Lots of internals and 2003 SP1 support
- [new] sekurlsa module and its kerberos submodule now work with old 2003 SP1 (live or dump)
- [remove] misc::wifi with WLanAPI will be replaced with dpapi::wifi raw access
- [fix] crypto::certificate buffer free at the right place
- [internal] new kull_m_file Find function with callback
- [internal] removed kull_m_file functions (read/write/file exist) with environment-variables, now used for all command-lines
- [internal] kull_m_crypto_hash better checks for CRC32 trick
- [internal] mimilove for Windows 2000 banner update
- [internal] crypto::system now works with buffers (for future registry access)
- [internal] kerberos::ptt & crypto::system call kull_m_file_Find instead of their own implementation
- [internal] remove CrtlHandler, from mimikatz main modules, when exiting to let PowerShell clean
- [internal] expand command lines environment-variables from mimikatz main modules
2016-01-31 16:01:45 +01:00
Benjamin DELPY 34d1d0f573 Crypto & Kerberos enhancements
- [fix] dpapi::capi now deals with AT_SIGNATURE keys
- [fix] sekurlsa::kerberos / kerberos:: encryption type are now signed
- [new] kerberos::ask to ask / save TGS from current TGT
- [new] crypto::system to describe/to export Windows System Certificate (cert, crl, ctl, keyid)
- [internal] smaller banner for smaller displays
- [internal] Copyrights for 2016
- [internal] kull_m_file can deal with environment-variable strings in paths
- [internal] kull_m_crypto new types for CERT_PROP_*_ID
2016-01-12 03:13:12 +01:00
Benjamin DELPY 5f12ced3fb Enhancements
* Code cleaning
2015-09-06 19:34:30 +02:00
Benjamin DELPY 8b8eaf0201 Global licence update, credits to Vincent LE TOUX for DCSync, and lsadump::hash moved to crypto::hash 2015-08-25 11:19:01 +02:00
Benjamin DELPY e6924b75ed Compatible with Visual Studio 2015 2015-07-24 00:20:34 +02:00
Benjamin DELPY 1265e86bfe README update for VS 2013 Express + user32.lib for mimilove 2015-07-19 17:10:43 +02:00
Benjamin DELPY f686a7400d mimilove DC support (large table handle instead of small) 2015-07-19 15:15:31 +02:00
Benjamin DELPY 9bac6378c6 mimilove for Windows 2000 <3 2015-07-19 02:34:06 +02:00