Cyber security

v1.0.0 – Elevating Cybersecurity And System Management Capabilities

The latest v1.0.0 release marks a significant advancement in cybersecurity and system management tools, introducing a host of new features and improvements.

With enhancements across the Find, SMB, HTTP, MSSQL, and Admin modules, this update focuses on optimizing site server management, group membership unrolling, and security checks.

Key additions include a more robust handling of LDAP searches, improved data storage methods, and enhanced credential recovery mechanisms, ensuring comprehensive coverage and control for administrators.

Added

  • Find module
    • Site servers and Management Points are broken out to their own table
    • Added -resolve flag to handle unrolling group membership.
    • Added CAS, SMSprovider, and Config columns to Site Servers table
    • Added SMSProvider to Computers Table
  • SMB module
    • Added SMS Provider check
    • Added Management Point check
    • Added Active/Passive config check
    • Added Central Administration Site check
  • HTTP module
    • Added “stop on success” logic if credentials are recovered
    • Added -sleep flag to set time to wait until requesting policies following registration
    • Added -uuid and -mp flags to allow the operator to manually request policies
  • MSSQL module
    • Added -stacked flag to provide a stacked MSSQL query for relaying rather than individual queries
  • Admin module
    • Added show_admins command to list current admin accounts
  • Show module
    • Added -json and -csv flags to export tables
    • Added -creds flag to show recovered credentials from HTTP or DPAPI

Changed

  • Updated all data storage methods to SQLite
  • Changed banner

Fixed

  • Find module
    • Refactored code and fixed bug to not properly perform LDAP searches
  • SMB module
    • Fixed a bug where discovered site servers and management points weren’t being added for service checks
  • HTTP module
    • Fixed a bug where errors weren’t properly handled if the database was missing (caused by not running the find module)
    • Fixed a bug where Management Points weren’t being pulled from the Computers table
Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

Nginx Commands in Linux: Start, Stop, Reload, Test, and Log

Nginx is a high-performance web server and reverse proxy trusted by some of the largest…

5 hours ago

ufw Command in Linux: Manage Firewall Rules with Examples

ufw (Uncomplicated Firewall) sits on top of iptables (or nftables on newer systems) and replaces…

5 hours ago

who Command in Linux: Show All Logged-In Users and Sessions

When you share a server with a team or investigate unexpected activity, the first question…

6 hours ago

file Command in Linux: Identify File Types Without Extensions

The file command inspects the actual contents of a file and reports its type — regardless of…

2 days ago

chattr Command in Linux: Set File Attributes with lsattr

chattr sets and removes special file attributes that operate at the filesystem level, separate from standard…

2 days ago

env Command in Linux: Show and Set Environment Variables

env prints the current environment, sets or removes variables for a single command, and can start…

2 days ago