46 Commits

Author SHA1 Message Date
XiaoliChan 18220b679f [wmi] Add defender
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2026-04-26 17:11:49 +08:00
XiaoliChan 86395e3362 [Hashdump] Add native download
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2026-04-26 15:45:38 +08:00
XiaoliChan 81c2bef4e1 wmiexec-Pro: Improvement 2026-04-26 14:05:44 +08:00
Red 5a7acdcd1b feat : Implement dynamic ScriptingEngine selection for ASEC 2026-02-09 09:53:53 -08:00
XiaoliChan 143975dca0 [Hashdump] Support NTDS Dump
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2025-10-13 17:31:00 +08:00
XiaoliChan 681cc87406 [Module] Add hashdump
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2025-10-13 14:59:37 +08:00
XiaoliChan 0770de3a50 Add todo list
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2025-05-27 16:15:59 +08:00
XiaoliChan 13cc48de17 [Enum] Add tasklist
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2025-05-27 16:09:44 +08:00
XiaoliChan 419bbfd359 Ruff & switch to logger
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2025-05-23 15:56:58 +08:00
Glynx 44704a2da4 make script references relative to main file 2024-11-23 13:09:27 +01:00
0xl0v3r 41ead30335 added timeout arg 2024-10-24 14:07:38 +07:00
XiaoliChan 138f8249b8 Bypass Defender
Signed-off-by: XiaoliChan <30458572+XiaoliChan@users.noreply.github.com>
2024-04-07 17:45:30 +08:00
XiaoliChan c402097e77 [exec-command] Reuse subcription when landing lognuke
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-07-22 16:39:12 +08:00
XiaoliChan 8bc2dba09a [classMethodEx] Bug fix
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-07-22 16:14:33 +08:00
XiaoliChan 651ed1d77a [exec-command] Pick missing function to fix empty command
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-07-10 11:22:41 +08:00
XiaoliChan e5da60cb21 [Exec-Command] Semi-interactive shell support upload & download file.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-09 17:13:01 +08:00
XiaoliChan b3c026d607 [Exec-Command] Add clear & history command.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-08 18:16:43 +08:00
XiaoliChan 5389afde7f [Exec-Command] No deep clean anymore.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-08 16:32:09 +08:00
XiaoliChan 33ca37ed62 [Exec-Command] Add lognuke in semi-interactive shell
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-08 16:00:02 +08:00
XiaoliChan d05a622f2d [Rid-Hijack] Use vbscript to grant access permission.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-08 11:28:33 +08:00
XiaoliChan 7bb181ca31 [Exec-command] Add codec argument in semi-interactive shell
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-06 19:09:03 +08:00
XiaoliChan 993f2a686a [Exec-command] Rename 'delay' to 'sleep'
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-06 16:48:19 +08:00
XiaoliChan 1d33d06385 [execute-VBS] Add deep clean function
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-06 16:29:32 +08:00
XiaoliChan d8877a6baa [Exec-command] Improve clear function
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-06 15:22:58 +08:00
XiaoliChan 5c406c2088 [Exec-command] Add 'Try except' when getting command results
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-06 12:21:48 +08:00
XiaoliChan 887b77332a [Exec-command] Add logging / delay functions in semi-interactive shell mode
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-06 12:10:39 +08:00
XiaoliChan d2cf35384f [Exec-command] Base64 encode path to avoid latin-1 encode error
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-06 11:24:48 +08:00
XiaoliChan 37f7fc9516 [Exec-command] Add semi-interactive shell
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-05 16:18:13 +08:00
XiaoliChan 059571bc92 [Exec-command] Fix single quotes issues.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-04 18:00:18 +08:00
XiaoliChan 0ae0626e1d [Filetransfer] Base64 encode filename to avoid latin-1 encode error
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-04 17:42:46 +08:00
XiaoliChan 79552e7796 [Exec-command] Encode command as base64 strings to avoid latin-1 encode error.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-04 15:29:56 +08:00
XiaoliChan 8beba5021a [RID-Hijack] Rename arguments
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-04 14:03:58 +08:00
XiaoliChan 058931e69c Revert "[RID-Hijack] Rename arguments"
This reverts commit 58db833f15.
2023-05-04 13:40:07 +08:00
XiaoliChan 58db833f15 [RID-Hijack] Rename arguments
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-05-04 13:37:44 +08:00
XiaoliChan 0d6bc1aedb [RID-Hijack] Support remove/backup/restore operation for target user.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-29 16:47:43 +08:00
XiaoliChan 66622ce41e [New module] RID-Hijack
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-28 18:33:31 +08:00
XiaoliChan 8c113343f2 [winrm] Hard-coding winrm firewall ID tag
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-19 18:08:15 +08:00
XiaoliChan f41bd22b0e [Firewall] bug fixed
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-19 14:26:15 +08:00
XiaoliChan c1dca7baab [Enhancement] Improve old system command execution in silent mode.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-17 12:36:48 +08:00
XiaoliChan 0c21f218b2 [Enhancement] Increase the delay time for command execution in old style.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-16 18:02:59 +08:00
XiaoliChan 5dd8ce5d39 [Enhancement] Support old version system under NT6
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-16 15:22:25 +08:00
XiaoliChan 13dd039517 [Fixed up!]fixed typo & execute command with quotes.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-14 16:39:39 +08:00
XiaoliChan 32cc5a86ac [Update] New module & improvement
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-09 17:18:49 +08:00
XiaoliChan 03f91fc91f [Filetransfer] Stop remove class every first time.
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-06 18:08:31 +08:00
XiaoliChan 4cfdd58c1c [enhancement] Update command execution module 2023-04-06 15:25:26 +08:00
XiaoliChan 84614b6705 Initial commit
Signed-off-by: XiaoliChan <2209553467@qq.com>
2023-04-04 14:34:08 +08:00