Crypt0-M3lon
e7a787cbc4
Fix socket timeout on HTTP POST requests
...
Remaining size should be checked at the end of the loop, the current implementation hang when POST request Content-Lenght is 0.
We want to check for Content-Length header only if we received full header.
2019-02-08 09:08:24 +01:00
lgandx
7339411766
Enhanced flags2 to force SMB signature off
2019-01-15 16:18:47 -03:00
lgandx
9656f140e7
Merge pull request #89 from cnotin/patch-1
...
Replace ParseSMB2NTLMv2Hash() by ParseSMBHash() to handle NTLMv1 and NTLMv2
2019-01-13 11:21:24 -03:00
Clément Notin
c99c9edf19
Replace ParseSMB2NTLMv2Hash() by ParseSMBHash() to handle NTLMv1 and NTLMv2
2019-01-09 19:16:52 +01:00
lgandx
38e721da98
fixed minor bugfix on recent merge
2018-11-28 21:07:39 -03:00
lgandx
fab7ba9e6e
Merge pull request #88 from PaulSec/master
...
Added proper changes to RunFinger
2018-11-28 20:40:51 -03:00
Paul A
105502edd4
Added proper changes to RunFinger (and is not checking for MS17-010 straight away)
2018-11-18 12:41:15 +01:00
lgandx
be551a0db3
Merge pull request #85 from mdeous/multirelay-exclude-user
...
[MultiRelay] allow to blacklist users
2018-11-11 09:51:04 -03:00
lgandx
4b5da9d7ce
Merge pull request #86 from mschader/patch-1
...
Update README.md: Fix typo
2018-11-11 09:49:23 -03:00
lgandx
47e63ae4ec
removed debug string
2018-11-11 09:46:15 -03:00
Markus
2287f936fd
Update README.md: Fix typo
...
Fixed just a tiny typo.
2018-10-22 15:54:06 +02:00
MatToufoutu
4e70e95a8e
allow to blacklist users
2018-09-14 00:19:17 +02:00
lgandx
a256355468
Merge pull request #46 from jackassplus/patch-1
...
Create OSX_launcher.sh
2018-08-24 15:16:00 -03:00
lgandx
dd39ee0c3d
Merge pull request #69 from EuanKerr/patch-1
...
Update RunFinger.py
2018-08-24 15:14:29 -03:00
lgandx
861c797eb5
Merge pull request #80 from myst404/master
...
Better handling of cleartext credentials
2018-08-24 15:13:39 -03:00
lgandx
6916b085ec
Merge pull request #83 from cnotin/patch-2
...
Fix multi HTTP responses
2018-08-24 14:34:53 -03:00
lgandx
6037d98160
Merge pull request #82 from cnotin/patch-1
...
Fix version number in settings.py
2018-08-24 14:34:15 -03:00
Clément Notin
defabfa543
Fix multi HTTP responses
2018-08-17 15:45:13 +02:00
Clément Notin
621c5a3c12
Fix version number in settings.py
2018-08-17 11:51:18 +02:00
myst404
750a2466d9
Better handling of cleartext credentials
2018-06-18 10:59:52 +02:00
lgandx
242bc37997
Merge pull request #71 from myst404/master
...
FindSMB2UPTime.py : Subnet support, error handling, minor improvements
2018-05-28 20:02:44 -03:00
lgandx
fe53785eec
Merge pull request #72 from chrismaddalena/master
...
Fixed some small typos in MS17-010 output
2018-05-28 20:01:44 -03:00
Chris Maddalena
daaf6f7296
Fixed some small typos in MS17-010 output
2017-12-05 17:31:27 -05:00
myst404
97aeac26d8
Subnet support, error handling, minor improvements
2017-11-30 16:05:14 +01:00
Euan
064f7e62c7
Update RunFinger.py
2017-11-20 12:38:54 +00:00
lgandx
c6bc263b5e
Merge pull request #51 from watersalesman/master
...
Fixed instances of "CRTL-C" to "CTRL-C"
2017-11-20 07:35:33 -03:00
lgandx
46cd888d15
Merge pull request #63 from myst404/master
...
Fixed space typo in FindSMB2UPTime.py
2017-11-20 07:32:49 -03:00
lgandx
a5a328b8c9
Merge pull request #67 from lprat/master
...
Add ignore case on check body for html inject
2017-11-20 07:31:52 -03:00
lgandx
b37f56264a
Added: check for null sessions and MS17-010
2017-11-19 22:58:28 -03:00
Lionel PRAT
47c311553e
Add ignore case on check body for html inject
2017-11-16 16:31:18 +01:00
lgandx
207b0d455c
added support for plain auth
2017-09-06 02:07:41 -03:00
lgandx
679cf65cff
Changed the complete LDAP parsing hash algo (ntlmv2 bug).
2017-09-04 23:15:27 -03:00
lgandx
be26b504b5
Fixed various bugs and improved the LDAP module.
2017-09-04 21:57:51 -03:00
lgandx
75aa21bbb9
Several Bugfix
2017-09-04 18:50:04 -03:00
myst404
11c00969c3
Fixed space typo in FindSMB2UPTime.py
2017-08-28 18:37:34 +02:00
lgandx
ffca0e2a92
Merge pull request #61 from OJ/fix-ldap-hash-parsing
...
Pass Challenge value to the LDAP parsing function
2017-08-24 22:00:10 -03:00
OJ
33bde41902
Pass Challenge value to the LDAP parsing function
2017-08-25 09:03:01 +10:00
lgandx
95c0d6e673
Merge pull request #58 from megabug/mssql-browser
...
Add Microsoft SQL Server Browser responder
2017-07-15 13:23:08 -03:00
lgandx
0436b47a2c
Merge pull request #59 from breakersall/patch-2
...
Add in check for uptime since March 14th 2017, which could indicate t…
2017-07-15 13:19:53 -03:00
Matt Kelly
5859c31e8e
Add in check for uptime since March 14th 2017, which could indicate the system is vulnerable to MS17-010
...
Add in check for uptime since March 14th 2017, which could indicate the system is vulnerable to MS17-010 (EternalBlue/dismay style exploit)
2017-06-28 14:09:05 -05:00
Matthew Daley
bc90f8fe27
Update README.md with new SQL Browser port usage
2017-06-28 19:15:07 +12:00
Matthew Daley
bff935e71e
Add Microsoft SQL Server Browser responder
...
When connecting to a named instance, a SQL client (at least SQL Server
Native Client) will send a request (namely a CLNT_UCAST_INST message) to
the server's SQL Server Browser service for instance connection
information. If it gets no response, the connection attempt fails.
By adding a SQL Server Browser responder for these requests, we ensure
that connections are successfully made to the SQL Server responder for
hash capture.
As per the comment, this is based on the document "[MC-SQLR]: SQL Server
Resolution Protocol", currently available at
<https://msdn.microsoft.com/en-us/library/cc219703.aspx >.
2017-06-28 19:14:38 +12:00
Randy Ramos
44a4e495cc
Fixed instances of "CRTL-C" to "CTRL-C"
2017-04-22 14:40:19 -04:00
lgandx
38219e249e
added: mimi32 cmd, MultiRelay random RPC & Namedpipe & latest mimikatz
2017-03-30 23:39:41 -03:00
lgandx
2223ef6689
updated readme
2017-03-29 14:24:17 -03:00
lgandx
2a80c7ed9c
MultiRelay 2.0 Release
2017-03-29 13:28:31 -03:00
jackassplus
54389c4851
Create OSX_launcher.sh
...
Launcher helper for OSX.
Checks for running LaunchDaemons using one of responder's ports and unloads them one by one, placing them on a stack to be restarted when responder is killed.
2017-03-27 08:10:33 -07:00
lgandx
b05bdcab96
Removed Paypal donation link.
2017-03-15 19:15:46 -03:00
lgandx
6f3cc4564c
Fixed bug in FindSMB2UPTime
2017-03-08 00:01:38 +01:00
lgandx
2b322b227e
minor fix
2017-02-18 20:57:36 +01:00
