XiaoliChan
|
18220b679f
|
[wmi] Add defender
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2026-04-26 17:11:49 +08:00 |
|
XiaoliChan
|
86395e3362
|
[Hashdump] Add native download
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2026-04-26 15:45:38 +08:00 |
|
XiaoliChan
|
81c2bef4e1
|
wmiexec-Pro: Improvement
|
2026-04-26 14:05:44 +08:00 |
|
Red
|
5a7acdcd1b
|
feat : Implement dynamic ScriptingEngine selection for ASEC
|
2026-02-09 09:53:53 -08:00 |
|
XiaoliChan
|
143975dca0
|
[Hashdump] Support NTDS Dump
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2025-10-13 17:31:00 +08:00 |
|
XiaoliChan
|
681cc87406
|
[Module] Add hashdump
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2025-10-13 14:59:37 +08:00 |
|
XiaoliChan
|
0770de3a50
|
Add todo list
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2025-05-27 16:15:59 +08:00 |
|
XiaoliChan
|
13cc48de17
|
[Enum] Add tasklist
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2025-05-27 16:09:44 +08:00 |
|
XiaoliChan
|
419bbfd359
|
Ruff & switch to logger
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2025-05-23 15:56:58 +08:00 |
|
Glynx
|
44704a2da4
|
make script references relative to main file
|
2024-11-23 13:09:27 +01:00 |
|
0xl0v3r
|
41ead30335
|
added timeout arg
|
2024-10-24 14:07:38 +07:00 |
|
XiaoliChan
|
138f8249b8
|
Bypass Defender
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
|
2024-04-07 17:45:30 +08:00 |
|
XiaoliChan
|
c402097e77
|
[exec-command] Reuse subcription when landing lognuke
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-07-22 16:39:12 +08:00 |
|
XiaoliChan
|
8bc2dba09a
|
[classMethodEx] Bug fix
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-07-22 16:14:33 +08:00 |
|
XiaoliChan
|
651ed1d77a
|
[exec-command] Pick missing function to fix empty command
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-07-10 11:22:41 +08:00 |
|
XiaoliChan
|
e5da60cb21
|
[Exec-Command] Semi-interactive shell support upload & download file.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-09 17:13:01 +08:00 |
|
XiaoliChan
|
b3c026d607
|
[Exec-Command] Add clear & history command.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-08 18:16:43 +08:00 |
|
XiaoliChan
|
5389afde7f
|
[Exec-Command] No deep clean anymore.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-08 16:32:09 +08:00 |
|
XiaoliChan
|
33ca37ed62
|
[Exec-Command] Add lognuke in semi-interactive shell
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-08 16:00:02 +08:00 |
|
XiaoliChan
|
d05a622f2d
|
[Rid-Hijack] Use vbscript to grant access permission.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-08 11:28:33 +08:00 |
|
XiaoliChan
|
7bb181ca31
|
[Exec-command] Add codec argument in semi-interactive shell
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-06 19:09:03 +08:00 |
|
XiaoliChan
|
993f2a686a
|
[Exec-command] Rename 'delay' to 'sleep'
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-06 16:48:19 +08:00 |
|
XiaoliChan
|
1d33d06385
|
[execute-VBS] Add deep clean function
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-06 16:29:32 +08:00 |
|
XiaoliChan
|
d8877a6baa
|
[Exec-command] Improve clear function
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-06 15:22:58 +08:00 |
|
XiaoliChan
|
5c406c2088
|
[Exec-command] Add 'Try except' when getting command results
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-06 12:21:48 +08:00 |
|
XiaoliChan
|
887b77332a
|
[Exec-command] Add logging / delay functions in semi-interactive shell mode
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-06 12:10:39 +08:00 |
|
XiaoliChan
|
d2cf35384f
|
[Exec-command] Base64 encode path to avoid latin-1 encode error
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-06 11:24:48 +08:00 |
|
XiaoliChan
|
37f7fc9516
|
[Exec-command] Add semi-interactive shell
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-05 16:18:13 +08:00 |
|
XiaoliChan
|
059571bc92
|
[Exec-command] Fix single quotes issues.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-04 18:00:18 +08:00 |
|
XiaoliChan
|
0ae0626e1d
|
[Filetransfer] Base64 encode filename to avoid latin-1 encode error
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-04 17:42:46 +08:00 |
|
XiaoliChan
|
79552e7796
|
[Exec-command] Encode command as base64 strings to avoid latin-1 encode error.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-04 15:29:56 +08:00 |
|
XiaoliChan
|
8beba5021a
|
[RID-Hijack] Rename arguments
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-04 14:03:58 +08:00 |
|
XiaoliChan
|
058931e69c
|
Revert "[RID-Hijack] Rename arguments"
This reverts commit 58db833f15.
|
2023-05-04 13:40:07 +08:00 |
|
XiaoliChan
|
58db833f15
|
[RID-Hijack] Rename arguments
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-05-04 13:37:44 +08:00 |
|
XiaoliChan
|
0d6bc1aedb
|
[RID-Hijack] Support remove/backup/restore operation for target user.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-29 16:47:43 +08:00 |
|
XiaoliChan
|
66622ce41e
|
[New module] RID-Hijack
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-28 18:33:31 +08:00 |
|
XiaoliChan
|
8c113343f2
|
[winrm] Hard-coding winrm firewall ID tag
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-19 18:08:15 +08:00 |
|
XiaoliChan
|
f41bd22b0e
|
[Firewall] bug fixed
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-19 14:26:15 +08:00 |
|
XiaoliChan
|
c1dca7baab
|
[Enhancement] Improve old system command execution in silent mode.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-17 12:36:48 +08:00 |
|
XiaoliChan
|
0c21f218b2
|
[Enhancement] Increase the delay time for command execution in old style.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-16 18:02:59 +08:00 |
|
XiaoliChan
|
5dd8ce5d39
|
[Enhancement] Support old version system under NT6
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-16 15:22:25 +08:00 |
|
XiaoliChan
|
13dd039517
|
[Fixed up!]fixed typo & execute command with quotes.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-14 16:39:39 +08:00 |
|
XiaoliChan
|
32cc5a86ac
|
[Update] New module & improvement
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-09 17:18:49 +08:00 |
|
XiaoliChan
|
03f91fc91f
|
[Filetransfer] Stop remove class every first time.
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-06 18:08:31 +08:00 |
|
XiaoliChan
|
4cfdd58c1c
|
[enhancement] Update command execution module
|
2023-04-06 15:25:26 +08:00 |
|
XiaoliChan
|
84614b6705
|
Initial commit
Signed-off-by: XiaoliChan <2209553467@qq.com>
|
2023-04-04 14:34:08 +08:00 |
|