diff options
| author | Kevin Robertson <Kevin-Robertson@users.noreply.github.com> | 2019-02-26 21:47:34 -0500 |
|---|---|---|
| committer | Kevin Robertson <Kevin-Robertson@users.noreply.github.com> | 2019-02-26 21:47:34 -0500 |
| commit | fee83f814b14cc1f3ecf208f6f0b219b74de90e5 (patch) | |
| tree | 5740de5c0c151d5f037b261575ee7616595ea0f8 /Inveigh-Relay.ps1 | |
| parent | 14dbf8aca26eaaa807fcfaa21e94047294186485 (diff) | |
| download | Inveigh-fee83f814b14cc1f3ecf208f6f0b219b74de90e5.tar.gz Inveigh-fee83f814b14cc1f3ecf208f6f0b219b74de90e5.zip | |
Kerberos TGT capture added to HTTP
Both SMB sniffer and the HTTP/HTTPS/Proxy listener can now capture Kerberos TGTs in kirbi format.
Diffstat (limited to 'Inveigh-Relay.ps1')
| -rw-r--r-- | Inveigh-Relay.ps1 | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/Inveigh-Relay.ps1 b/Inveigh-Relay.ps1 index ce5af25..facf901 100644 --- a/Inveigh-Relay.ps1 +++ b/Inveigh-Relay.ps1 @@ -340,6 +340,8 @@ if(!$inveigh) $inveigh.enumerate = New-Object System.Collections.ArrayList $inveigh.IP_capture_list = New-Object System.Collections.ArrayList $inveigh.log = New-Object System.Collections.ArrayList + $inveigh.kerberos_TGT_list = New-Object System.Collections.ArrayList + $inveigh.kerberos_TGT_username_list = New-Object System.Collections.ArrayList $inveigh.NTLMv1_list = New-Object System.Collections.ArrayList $inveigh.NTLMv1_username_list = New-Object System.Collections.ArrayList $inveigh.NTLMv2_list = New-Object System.Collections.ArrayList @@ -347,6 +349,7 @@ if(!$inveigh) $inveigh.POST_request_list = New-Object System.Collections.ArrayList $inveigh.valid_host_list = New-Object System.Collections.ArrayList $inveigh.ADIDNS_table = [HashTable]::Synchronized(@{}) + $inveigh.relay_privilege_table = [HashTable]::Synchronized(@{}) $inveigh.relay_failed_login_table = [HashTable]::Synchronized(@{}) $inveigh.relay_history_table = [HashTable]::Synchronized(@{}) $inveigh.request_table = [HashTable]::Synchronized(@{}) |