Code

Feature/havoc parsing#10

Code

Closed

Tw1sm wants to merge 61 commits intofortalice:mainfortalice/bofhound:mainfrom coffeegist:feature/havoc-parsingcoffeegist/bofhound:feature/havoc-parsingCopy head branch name to clipboard

+23,779-783

Commits

Commits on Aug 9, 2023

• update JSON specs for BH CE (v5.0.0)

  Tw1sm

  committed
  d0d951e

  Copy full SHA for d0d951e

Commits on Oct 17, 2023

• * Require changelog updates for PRs coming into main

  coffeegist

  committed
  a058bcb

  Copy full SHA for a058bcb

• * Add opened event to changelog action

  coffeegist

  committed
  57d1ce3

  Copy full SHA for 57d1ce3

• * Update github checkout action to v4 and set fetch-depth to 0

  coffeegist

  committed
  03e7795

  Copy full SHA for 03e7795

• * Fetch origin on changelog checks

  coffeegist

  committed
  e5f907f

  Copy full SHA for e5f907f

• * Tag v0.2.1 for release

  coffeegist

  committed
  a05a761

  Copy full SHA for a05a761

Commits on Dec 3, 2023

• giant push of session/local group handling

  Tw1sm

  committed
  3b7fb6e

  Copy full SHA for 3b7fb6e

Commits on Dec 5, 2023

• add log with ldap/sessions/localgroup for additional test cases

  Tw1sm

  committed
  844be35

  Copy full SHA for 844be35

Commits on Dec 13, 2023

• add crossRef model for tracking domain netBIOS names (for session correlation)

  Tw1sm

  committed
  af5a5b6

  Copy full SHA for af5a5b6

Commits on Dec 14, 2023

• change crossref to referral

  Tw1sm

  committed
  0f99a43

  Copy full SHA for 0f99a43

• move sid check to should_import func

  Tw1sm

  committed
  4cdd551

  Copy full SHA for 4cdd551

Commits on Dec 15, 2023

• update marvel log with crossref query data

  Tw1sm

  committed
  3d8e598

  Copy full SHA for 3d8e598

Commits on Dec 22, 2023

• match sessions using NetWkstaGetInfo on NetBIOS domain name/hostname

  Tw1sm

  committed
  627b243

  Copy full SHA for 627b243

• add tests for fully processed local groups/session objects

  Tw1sm

  committed
  6d51e14

  Copy full SHA for 6d51e14

• upper nCName; fix test

  Tw1sm

  committed
  6a83f85

  Copy full SHA for 6a83f85

• remove weak computer matching on only samaccountname

  Tw1sm

  committed
  7f8dd6a

  Copy full SHA for 7f8dd6a

• change repository URLs

  Tw1sm

  committed
  ba35bba

  Copy full SHA for ba35bba

• update readme

  Tw1sm

  committed
  a8a965b

  Copy full SHA for a8a965b

Commits on Dec 27, 2023

• update changelog

  Tw1sm

  committed
  5e1ee0b

  Copy full SHA for 5e1ee0b

Commits on Jan 12, 2024

• Merge pull request #4 from coffeegist/feature/parse-session-data

  coffeegist

  authored
  ee84bdf

  Copy full SHA for ee84bdf

Commits on Jan 26, 2024

• ensure GPOs get domainsid attr set

  Tw1sm

  committed
  790390c

  Copy full SHA for 790390c

• update readme

  Tw1sm

  committed
  7172f5b

  Copy full SHA for 7172f5b

Commits on Jan 29, 2024

• Update README.md

  Tw1sm

  authored
  9914ead

  Copy full SHA for 9914ead

• Merge pull request #5 from coffeegist/fix/gpo-json-domainsid-prop

  Show description for e0c5d7d
  Tw1sm

  authored
  e0c5d7d

  Copy full SHA for e0c5d7d

Commits on Jan 30, 2024

• add session blog

  Tw1sm

  committed
  7409776

  Copy full SHA for 7409776

• Merge pull request #6 from coffeegist/fix/readme

  Show description for d811dd6
  Tw1sm

  authored
  d811dd6

  Copy full SHA for d811dd6

Commits on Mar 19, 2024

• update pyproject

  

  Paul SALADIN

  authored and

  Paul SALADIN

  committed
  2cb5742

  Copy full SHA for 2cb5742

• update pyproject

  

  Paul SALADIN

  authored and

  Paul SALADIN

  committed
  05105e6

  Copy full SHA for 05105e6

• update pyproject

  

  Paul SALADIN

  authored and

  Paul SALADIN

  committed
  7356b40

  Copy full SHA for 7356b40

Commits on Mar 30, 2024

• Add PKI (ADCS) support

  

  Paul SALADIN

  authored and

  Paul SALADIN

  committed
  b8809fb

  Copy full SHA for b8809fb

• Changelog.md updated

  

  Paul SALADIN

  authored and

  Paul SALADIN

  committed
  b851b10

  Copy full SHA for b851b10

Commits on Apr 8, 2024

• Modified data parsing to correspond to Data version 6 (2024 April - Sharphound)

  

  Paul SALADIN

  authored and

  Paul SALADIN

  committed
  e0a390f

  Copy full SHA for e0a390f

Commits on May 30, 2024

• Output enhancement

  

  Paul SALADIN

  authored and

  Paul SALADIN

  committed
  92bce9a

  Copy full SHA for 92bce9a

• fix indexing error

  Tw1sm

  committed
  ffad642

  Copy full SHA for ffad642

Commits on May 31, 2024

• require python ^3.10 for match statement

  Tw1sm

  committed
  e226ef8

  Copy full SHA for e226ef8

• update lockfile

  Tw1sm

  committed
  121d95e

  Copy full SHA for 121d95e

Commits on Jun 1, 2024

• remove assertion using deprecated method

  Tw1sm

  committed
  abb78e0

  Copy full SHA for abb78e0

• add ntauthstore, issuancepolicy types; reorg util files

  Tw1sm

  committed
  dd26919

  Copy full SHA for dd26919

• fix bug with domain properties and trust attributes

  Tw1sm

  committed
  c122e93

  Copy full SHA for c122e93

Commits on Jun 2, 2024

• reorg pki classes into separate files

  Tw1sm

  committed
  994eae6

  Copy full SHA for 994eae6

• remove unneeded code

  Tw1sm

  committed
  efd0ccb

  Copy full SHA for efd0ccb

• set methods metadata to 0

  Tw1sm

  committed
  20b1fcb

  Copy full SHA for 20b1fcb

• remove bloodhound_pki file

  Tw1sm

  committed
  fe956a5

  Copy full SHA for fe956a5

Commits on Jun 3, 2024

• handle cACertificate attr with 2+ certs

  Tw1sm

  committed
  154d903

  Copy full SHA for 154d903

• fix properties for BHCE; build ca cert chains

  Tw1sm

  committed
  01dbad6

  Copy full SHA for 01dbad6

• rename bloodhound_pki_template to bloodhound_certtemplate

  Tw1sm

  committed
  5af410e

  Copy full SHA for 5af410e

Commits on Jul 9, 2024

• Addressed issues mentionned through MR review

  

  Paul SALADIN

  authored and

  Paul SALADIN

  committed
  4587176

  Copy full SHA for 4587176

• Review properties level

  

  Paul SALADIN

  authored and

  Paul SALADIN

  committed
  c466e26

  Copy full SHA for c466e26

Commits on Oct 20, 2024

• remove bad import

  Tw1sm

  committed
  4794182

  Copy full SHA for 4794182

• merge ADCS ACL parsing into single func

  Tw1sm

  committed
  9e17579

  Copy full SHA for 9e17579

• fix bug causing published templates to be missed

  Tw1sm

  committed
  a6d999c

  Copy full SHA for a6d999c

• process enroll ACLs on EnterpriseCAs

  Tw1sm

  committed
  380f8a1

  Copy full SHA for 380f8a1

• change --properties_level to --properties-level

  Tw1sm

  committed
  7fb82f6

  Copy full SHA for 7fb82f6

• validate properties level with enum; member attribues on groups level 2 only

  Tw1sm

  committed
  067a1ae

  Copy full SHA for 067a1ae

• adjust adds test case due to container parsing

  Tw1sm

  committed
  76aae0e

  Copy full SHA for 76aae0e

• Merge pull request #8 from P-aLu/main

  Show description for 9a999e4
  Tw1sm

  authored
  9a999e4

  Copy full SHA for 9a999e4

• bump version and changelog (#9)

  Tw1sm

  authored
  557beec

  Copy full SHA for 557beec

Commits on Oct 22, 2024

• Fix #10 - ContainedBy Property Bug (#11)

  Show description for c837f2a
  Tw1sm

  authored
  c837f2a

  Copy full SHA for c837f2a

Commits on Oct 25, 2024

• fix #12 (#14)

  Tw1sm

  authored
  bf0eec9

  Copy full SHA for bf0eec9

• add havoc parser; make pasers more modular

  Tw1sm

  committed
  1f9ef94

  Copy full SHA for 1f9ef94

Commits on Oct 30, 2024

• prep for merge

  Tw1sm

  committed
  ff0133f

  Copy full SHA for ff0133f