aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2020-08-17Updated README.mdmasterdevharmj0y1-0/+2
2018-07-02swapped default kerberoasting output formatsHarmJ0y1-14/+27
2017-11-12re-added -Domain to Get-DomainForeignUser/GroupMemberHarmJ0y1-0/+2
2017-10-29-Redid the default DC bindserver logic for Get-DomainSearcherHarmJ0y1-67/+56
-fixed Get-DomainForeignUser / Get-DomainForeignGroupMember when using a global catalog -target group/member domains are now extracted from found DN names
2017-10-15-changed default enumeration method for Get-DomainTrust to LDAPHarmJ0y1-55/+64
-Added WhenCreated/WhenChanged as default output for Get-DomainTrust
2017-10-15Added mod to Get-DomainSPNTicket from @leechristensen to better parse ticketsHarmJ0y1-20/+55
2017-09-17corrected verbose output for some PowerView functionsHarmJ0y1-3/+3
2017-09-17Added Remove-DomainObjectAclHarmJ0y1-0/+283
2017-09-17Fixed Kerberoasting output so it at least cracks now for john's new format ↵HarmJ0y1-36/+11
change.
2017-09-17Fixed New-ADObjectAccessControlEntry so -PrincipalIdentity now accepts ↵HarmJ0y1-16/+23
built-in sids.
2017-09-17Merge pull request #238 from hackjammer/devWill3-151/+114
Improve output of Invoke-PrivescAudit
2017-09-17Merge pull request #243 from cfalta/masterWill1-0/+61
Host parsing extension for IP ranges
2017-09-17Merge pull request #253 from davehull/devWill1-1/+3
Adds dlls from knowndll paths to knowndlls
2017-09-17Merge pull request #254 from andyrobbins/patch-1Will1-0/+122
Add Remove-DomainGroupMember function
2017-09-17Add Remove-DomainGroupMember functionAndy Robbins1-0/+122
Add-DomainGroupMember allows for adding users to a group, and is especially useful given its ability to supply alternate credentials when establishing the connection to the DC. Remove-DomainGroupMember is intended to act as a "cleanup" function for attack paths that abuse DACL misconfigurations, where we need to remove a principal from a group after we are done abusing that group's existing permissions.
2017-09-08Adds tolower() as it was dropping .DLL files in my localDave Hull1-1/+1
2017-09-08Merge branch 'dev' of github.com:PowerShellMafia/PowerSploit into devDave Hull160-13234/+44603
2017-09-08Adds dlls from knowndll paths to knowndllsDave Hull1-0/+2
2017-08-10Path array fix for Get-ModifiablePathb33f1-1/+7
This is a fix for: https://github.com/PowerShellMafia/PowerSploit/issues/248
2017-08-09+Version check fixb33f1-5/+3
Changed version check to be of type "System.Version". This fixes: https://github.com/PowerShellMafia/PowerSploit/issues/163
2017-07-22Typo fixb33f1-1/+1
2017-07-22Fix for profile cleanupb33f1-0/+2
When removing the persistence, the profile is not cleaned up. This is a temporary fix for that which should leave any legitemate profile content in tact. This psm may need a rework though. Related to: https://github.com/PowerShellMafia/PowerSploit/issues/165
2017-07-22+Region check on Find-DomainLocalGroupMemberb33f1-0/+6
If a user does not manually specify $GroupName it defaults to "Administrators" which may not be valid in specific regions. I added a check to pull out the Group Name from the Admin SID, see: https://github.com/PowerShellMafia/PowerSploit/issues/176
2017-07-18Fix for edge case where System.Core is not loadedb33f1-1/+4
Make sure System.Core is loaded before creating an AES object. https://github.com/PowerShellMafia/PowerSploit/issues/247
2017-07-17Merge pull request #241 from byt3bl33d3r/devb33f1-1/+1
Fixed alias typo for Find-GPOComputerAdmin
2017-07-17Typo fixb33f1-1/+1
2017-07-17+ PSv2 Compatibilityb33f1-1/+1
Fix for unable to index into object of type System.Diagnostic.Process on PSv2.
2017-07-17+ Invalid Cast Fixb33f1-2/+2
This is a fix for https://github.com/PowerShellMafia/PowerSploit/issues/151
2017-06-18-Added the dynamic -UACFilter parameter that completes based on the $UACEnum ↵HarmJ0y1-13/+466
enumeration Example: Get-DomainUser -UACFilter DONT_REQ_PREAUTH,NOT_PASSWORD_EXPIRED Returns users with kerberos preauth not set AND where the password isn't expired -Integrated New-DynamicParameter from beatcracker in order to accomplish the dynamic params -Corrected from help typos
2017-06-17For any "-Identity" values formatted as distinguishednames passed to ↵HarmJ0y1-1/+110
Verb-Domain* functions, the object's domain is now extracted from the dn and the directory searcher is rebound to the proper domain.
2017-06-17Added Sacl enumeration to Get-DomainObjectACLHarmJ0y1-5/+23
2017-06-16Convert-LDAPProperty now properly parses sidHistory with multiple valuesHarmJ0y1-3/+3
2017-06-13-Added Get-DomainObjectAttributeHistory to retrieve attribute replication ↵HarmJ0y1-2/+686
metadata from domain objects -Added Get-DomainObjectLinkedAttributeHistory to retrieve linked attribute replication metadata from domain objects (i.e. group memberships) -Added Get-DomainGroupMemberDeleted to retrieve information on group members that were removed from a specified group at some point
2017-06-13Updated Find-DomainObjectPropertyOutlier approach.HarmJ0y1-24/+17
2017-05-31Fixed alias typo for Find-GPOComputerAdminbyt3bl33d3r1-1/+1
2017-05-25-Added negations to some -GroupScope and -GroupProperty valuesHarmJ0y1-9/+14
2017-05-25-Added "-GroupScope [DomainLocal/Global/Universal]" to Get-DomainGroupHarmJ0y1-0/+36
-Added "-GroupProperty [Security/Distribution/CreatedBySystem]" to Get-DomainGroup
2017-05-24-added parsing of the 'useraccountcontrol' property into human readable formatHarmJ0y1-24/+101
-added parsing of the 'accountexpires' property into human readable format -added parsing of the 'grouptype' property into human readable format -added parsing of the 'samaccounttype' property into a readable format
2017-05-24Merge branch 'dev' of github.com:PowerShellMafia/PowerSploit into devHarmJ0y1-0/+62
2017-05-23Merge pull request #236 from MrAnde7son/patch-3Will1-0/+62
Get-GPODelegation
2017-05-20Get-DomainPolicyData now returns proper object output instead of hashtable.HarmJ0y1-53/+92
Modified Get-IniContent and Get-GptTmpl to accept '-OutputObject' to output a PSObject instead of a hashtable
2017-05-20increased PowerUp error checkingHarmJ0y1-4/+6
2017-05-10Add Name alias to PowerUp object properties for easier parsingHackJammer1-0/+9
2017-05-10Default Invoke-PrivEscAudit to return objects for parsingHackJammer1-149/+102
2017-05-08fixed quotesHarmJ0y1-5/+5
2017-05-07Fix build for import and run of Invoke-PrivescAuditJames McGinnigle3-8/+8
2017-05-07Update PowerView.ps1Itamar1-7/+9
Fixed null access control entry in results.
2017-05-04Host parsing extension for IP rangesChristoph Falta1-0/+61
Small extension of the host parsing function so you can also pass ranges (e.g 172.16.0.1-172.16.2.254) as target
2017-05-04Get-GPODelegationItamar1-0/+60
Hi, I know you guys mentioned this before, but I've not this implemented. I wrote Get-GPODelegation that finds users with write permissions on Group Policy objects, for a potential privilege escalation path. As requested, moved into dev branch.
2017-04-28Get-DomainGPO - fixed enumerations of 'enforced' GPOs, andHarmJ0y1-5/+20
bug fix for nested OUs with similar starting names.