…INFO"

As per: https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-CIFS/%5BMS-CIFS%5D-180912.pdf

Fixes fortra#105

Added deprectation warning in examples for v0.11

add dumpntlm.py to examples

Updated Changelog with latest example merge credits

…ps (fortra#1578)

* Remove unnecessary calls to DRSCrackNames in LDAP and full DRSUAPI DC Syncs

* Support graceful fallback for DCs that don't support SID lookups

Added query information level 0x0109 for smb1 "SMB_QUERY_FILE_STREAM_INFO"

* added setuptools requirement for pkg_resources python library
removed future as it wasn't being used

* added setuptools to requirements, removed future

* Address DHCP python3 bug

* Fix packed packet format error

* Apply suggestions from code review

---------

Co-authored-by: Ujwal Komarla <[email protected]>
Co-authored-by: alexisbalbachan <[email protected]>

…ate-use_db

Co-authored-by: robn-applaton <[email protected]>

…ave with it enabling -request (if previously omitted). (fortra#1607)

…itial_authentication

fortra#1586)

* returns STATUS_DIRECTORY_NOT_EMPTY when we try to tag a non-empty folder for deletion

* remove duplicate imports

---------

Co-authored-by: robn-applaton <[email protected]>

Fixed the join and unjoin text as it was the wrong way around

fortra#1201)

* Adding describeTicket base

* Started implementing Ticket decryption

* Update describeTicket.py

* Added PAC structures

* Improved PAC parsing and printing

* Fixing the PAC_CLIENT_INFO structure

* Fixes dates, improved errors, prepared for PR

* Added PAC Credentials structure, improved code

* Reverting getST edit

* Cleaning imports and overall code

* Reverting ALL getST changes, wrong dev branch

* Debugging some keys calculation

* Adding ticket decoding and improving parsing

* Added expired flag to endtime and renewtill times

* Reverting change to pac.py that was failing ticketer.py

* Reverting change to pac.py (forgot smth)

* fixed error

fixed error: local variable 'kerberoast_hash' referenced before assignment

* Handling missing kvno

* Fixing debug message

* Fixing SID and UAC flags parsing

* add PAC_REQUESTOR and PAC_ATTRIBUTES_INFO

* Temporary fix RPC_SID faulty implem with LDAP_SID

* Complete UPN_DNS_INFO implementation with S Flag data

* Split UPN_DNS struct

* Handle null constructor

* Add multiline print for data array + Add a corresponding table for well-kwonw group Id

* Add more well-known SID

* Change default type behavior

* Add Groups decoded field

* Add credit

* Printing ticket session key

* Re-adding attributes and requestor PAC constants

---------

Co-authored-by: Podalirius <[email protected]>
Co-authored-by: p0dalirius <[email protected]>
Co-authored-by: wqreytuk <[email protected]>
Co-authored-by: Dramelac <[email protected]>

…hrough AS-REQ (fortra#1413)

* Support for ASREPKerberoast

* Fixing undefined name 'tgs'

* Typo on the argument, -preauth changed to -no-preauth

* Fixing args handling, -usersfile is needed if -no-preauth

* Handling case when service is None

* Update kerberosv5.py

* adding param to getKerberosTGT to return or raise depending on context

* specifying serverName param in getKerberosTGT calls

* specifying serverName param in getKerberosTGT calls

* Adding -impersonate flag to ingest S4U2self+U2U TGT

* Functional version

* Commenting out duration customization for sapphire

* Fixes fortra#1605

* Adding AD_IF_RELEVANT reference

* Fixing undefined tgt session key and wrong cname for impersonation

* Adding missing and ignored params

* Added CREDHIST support
* Added fixes from suggestions

…es (fortra#1617)

* * Enhanced MSSQLShell in NTLMRelayX leveraging TcpShell (as in SMB and LDAP)

* * Created handle_lastError decorator applied to every command to show errors in the corresponding SQLShell

…ortra#1614)

* Update smbclient.py

* Avoid closing down the connection if a folder does not exist

* [DumpNTLMInfo.py] fix error with 2003

Signed-off-by: XiaoliChan <[email protected]>

* [DumpNTLMInfo.py] garbrielg5: review I

Signed-off-by: Xiaoli Chan <[email protected]>

---------

Signed-off-by: XiaoliChan <[email protected]>
Signed-off-by: Xiaoli Chan <[email protected]>

* start remote registry as unprivileged user in reg.py

Trigger the start of the RemoteRegistry service as unprivileged user by opening the winreg named pipe.

* enable access to HKEY_USERS trough reg.py