Cyber security

v1.0.0 – Elevating Cybersecurity And System Management Capabilities

The latest v1.0.0 release marks a significant advancement in cybersecurity and system management tools, introducing a host of new features and improvements.

With enhancements across the Find, SMB, HTTP, MSSQL, and Admin modules, this update focuses on optimizing site server management, group membership unrolling, and security checks.

Key additions include a more robust handling of LDAP searches, improved data storage methods, and enhanced credential recovery mechanisms, ensuring comprehensive coverage and control for administrators.

Added

  • Find module
    • Site servers and Management Points are broken out to their own table
    • Added -resolve flag to handle unrolling group membership.
    • Added CAS, SMSprovider, and Config columns to Site Servers table
    • Added SMSProvider to Computers Table
  • SMB module
    • Added SMS Provider check
    • Added Management Point check
    • Added Active/Passive config check
    • Added Central Administration Site check
  • HTTP module
    • Added “stop on success” logic if credentials are recovered
    • Added -sleep flag to set time to wait until requesting policies following registration
    • Added -uuid and -mp flags to allow the operator to manually request policies
  • MSSQL module
    • Added -stacked flag to provide a stacked MSSQL query for relaying rather than individual queries
  • Admin module
    • Added show_admins command to list current admin accounts
  • Show module
    • Added -json and -csv flags to export tables
    • Added -creds flag to show recovered credentials from HTTP or DPAPI

Changed

  • Updated all data storage methods to SQLite
  • Changed banner

Fixed

  • Find module
    • Refactored code and fixed bug to not properly perform LDAP searches
  • SMB module
    • Fixed a bug where discovered site servers and management points weren’t being added for service checks
  • HTTP module
    • Fixed a bug where errors weren’t properly handled if the database was missing (caused by not running the find module)
    • Fixed a bug where Management Points weren’t being pulled from the Computers table
Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

Install Samba on Ubuntu 18.04: Configure Shares and User Access

Samba is a free, open-source implementation of the SMB/CIFS network protocol that lets Linux servers share…

11 hours ago

Set Up an OpenVPN Server on Ubuntu 18.04 with EasyRSA and UFW

Running your own VPN gives you full control over your traffic, privacy, and connection security. It encrypts…

11 hours ago

Install IntelliJ IDEA on Ubuntu 18.04 via Snap: Setup Guide

IntelliJ IDEA is a full-featured IDE for JVM and Android development made by JetBrains. It includes…

11 hours ago

Install Steam on Ubuntu 18.04: Multiverse Setup and First Run

Steam is a cross-platform digital distribution platform by Valve Corporation that gives you access to thousands…

12 hours ago

Install Redmine on Ubuntu 18.04 with MySQL, Passenger, and Nginx

Redmine is one of the most popular open-source project management and issue tracking platforms. It is…

12 hours ago

Install VirtualBox on Ubuntu 18.04 from the Oracle Repository

VirtualBox is a free, open-source, cross-platform virtualization application maintained by Oracle. It lets you run multiple…

1 day ago