v1.0.0 – Elevating Cybersecurity And System Management Capabilities

The latest v1.0.0 release marks a significant advancement in cybersecurity and system management tools, introducing a host of new features and improvements.

With enhancements across the Find, SMB, HTTP, MSSQL, and Admin modules, this update focuses on optimizing site server management, group membership unrolling, and security checks.

Key additions include a more robust handling of LDAP searches, improved data storage methods, and enhanced credential recovery mechanisms, ensuring comprehensive coverage and control for administrators.

Added

Find module
- Site servers and Management Points are broken out to their own table
- Added -resolve flag to handle unrolling group membership.
- Added CAS, SMSprovider, and Config columns to Site Servers table
- Added SMSProvider to Computers Table
SMB module
- Added SMS Provider check
- Added Management Point check
- Added Active/Passive config check
- Added Central Administration Site check
HTTP module
- Added “stop on success” logic if credentials are recovered
- Added -sleep flag to set time to wait until requesting policies following registration
- Added -uuid and -mp flags to allow the operator to manually request policies
MSSQL module
- Added -stacked flag to provide a stacked MSSQL query for relaying rather than individual queries
Admin module
- Added show_admins command to list current admin accounts
Show module
- Added -json and -csv flags to export tables
- Added -creds flag to show recovered credentials from HTTP or DPAPI

Changed

Updated all data storage methods to SQLite
Changed banner

Fixed

Find module
- Refactored code and fixed bug to not properly perform LDAP searches
SMB module
- Fixed a bug where discovered site servers and management points weren’t being added for service checks
HTTP module
- Fixed a bug where errors weren’t properly handled if the database was missing (caused by not running the find module)
- Fixed a bug where Management Points weren’t being pulled from the Computers table

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.