Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature/msp 12867/domain hashdump rfe #5657

Merged
merged 5 commits into from
Jul 23, 2015
Merged

Feature/msp 12867/domain hashdump rfe #5657

merged 5 commits into from
Jul 23, 2015

Conversation

thelightcosine
Copy link

Fixes several of the issues referenced in #5645

The Date String issue looks like it's originating inside Meterpreter itself, and will bear further investigation. This should take care of all the other serious reported issues.

See #5348 for verification steps. Here's one way:

David Maloney added 5 commits July 2, 2015 11:52
fix up ordering of pre-checks
42daf4d 
i hate early returns, but we need to bail out early
if some of these checks fail

MSP-12867
check registry for ntds location
89d283d 
check the registry for the location of the ntds.dit
file

MSP-12867
use registry data for VSS grab
cc51d1e 
use the location data we got from the registry for copying
the NTDS.dit file correctly with the VSS method
deregister unwated options
7b2b526 
deregister mixin options that we don't need
for this module
put rhost option back
e843db7 
it is needed for the wmic query that
creates the shadowcopy

MSP-12867
@thelightcosine thelightcosine added meterpreter creds jira Old label, generally associated with PRs that had pro support and a jira link labels Jul 2, 2015
@wvu
Copy link
Contributor

wvu commented Jul 3, 2015

Can you check off the ones you fixed in #5645? Thanks!

@thelightcosine
Copy link
Author

@wvu-r7 that has been done

@shuckins-r7 shuckins-r7 self-assigned this Jul 17, 2015
@shuckins-r7 shuckins-r7 merged commit e843db7 into rapid7:master Jul 23, 2015
shuckins-r7 added a commit that referenced this pull request Jul 23, 2015
@shuckins-r7
Land #5657, misc fixes to domain_hashdump
a818dc4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@shuckins-r7 shuckins-r7

Labels
creds jira Old label, generally associated with PRs that had pro support and a jira link meterpreter
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@thelightcosine @wvu @shuckins-r7