Skip to content

Feature/havoc parsing #10

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
Tw1sm wants to merge 61 commits into from
Closed

Feature/havoc parsing #10

Tw1sm wants to merge 61 commits into from

Conversation

@Tw1sm
Copy link
Contributor

@Tw1sm Tw1sm commented Oct 30, 2024

  • Add parser for Havoc
  • Make parsers more modular
  • Cut down on duplicate log file reads

Tw1sm and others added 30 commits August 9, 2023 14:31
@Tw1sm
update JSON specs for BH CE (v5.0.0)
d0d951e
@coffeegist
* Require changelog updates for PRs coming into main
a058bcb
@coffeegist
* Add opened event to changelog action
57d1ce3
@coffeegist
* Update github checkout action to v4 and set fetch-depth to 0
03e7795
@coffeegist
* Fetch origin on changelog checks
e5f907f
@coffeegist
* Tag v0.2.1 for release
a05a761
@Tw1sm
giant push of session/local group handling
3b7fb6e
@Tw1sm
add log with ldap/sessions/localgroup for additional test cases
844be35
@Tw1sm
add crossRef model for tracking domain netBIOS names (for session cor…
af5a5b6 
…relation)
@Tw1sm
change crossref to referral
0f99a43
@Tw1sm
move sid check to should_import func
4cdd551
@Tw1sm
update marvel log with crossref query data
3d8e598
@Tw1sm
match sessions using NetWkstaGetInfo on NetBIOS domain name/hostname
627b243
@Tw1sm
add tests for fully processed local groups/session objects
6d51e14
@Tw1sm
upper nCName; fix test
6a83f85
@Tw1sm
remove weak computer matching on only samaccountname
7f8dd6a
@Tw1sm
change repository URLs
ba35bba
@Tw1sm
update readme
a8a965b
@Tw1sm
update changelog
5e1ee0b
@coffeegist
Merge pull request #4 from coffeegist/feature/parse-session-data
ee84bdf
@Tw1sm
ensure GPOs get domainsid attr set
790390c
@Tw1sm
update readme
7172f5b
@Tw1sm
Update README.md
9914ead
@Tw1sm
Merge pull request #5 from coffeegist/fix/gpo-json-domainsid-prop
e0c5d7d 
Fix/gpo json domainsid prop
@Tw1sm
add session blog
7409776
@Tw1sm
Merge pull request #6 from coffeegist/fix/readme
d811dd6 
README Update
update pyproject
2cb5742
update pyproject
05105e6
update pyproject
7356b40
Add PKI (ADCS) support
b8809fb
Tw1sm and others added 28 commits May 30, 2024 11:24
@Tw1sm
fix indexing error
ffad642
@Tw1sm
require python ^3.10 for match statement
e226ef8
@Tw1sm
update lockfile
121d95e
@Tw1sm
remove assertion using deprecated method
abb78e0
@Tw1sm
add ntauthstore, issuancepolicy types; reorg util files
dd26919
@Tw1sm
fix bug with domain properties and trust attributes
c122e93
@Tw1sm
reorg pki classes into separate files
994eae6
@Tw1sm
remove unneeded code
efd0ccb
@Tw1sm
set methods metadata to 0
20b1fcb
@Tw1sm
remove bloodhound_pki file
fe956a5
@Tw1sm
handle cACertificate attr with 2+ certs
154d903
@Tw1sm
fix properties for BHCE; build ca cert chains
01dbad6
@Tw1sm
rename bloodhound_pki_template to bloodhound_certtemplate
5af410e
Addressed issues mentionned through MR review
4587176
Review properties level
c466e26
@Tw1sm
remove bad import
4794182
@Tw1sm
merge ADCS ACL parsing into single func
9e17579
@Tw1sm
fix bug causing published templates to be missed
a6d999c
@Tw1sm
process enroll ACLs on EnterpriseCAs
380f8a1
@Tw1sm
change --properties_level to --properties-level
7fb82f6
@Tw1sm
validate properties level with enum; member attribues on groups level…
067a1ae 
… 2 only
@Tw1sm
adjust adds test case due to container parsing
76aae0e
@Tw1sm
Merge pull request #8 from P-aLu/main
9a999e4 
Add PKI (ADCS) support
@Tw1sm
bump version and changelog (#9)
557beec
@Tw1sm
Fix #10 - ContainedBy Property Bug (#11)
c837f2a 
* set containedby to empty dict by default for output JSON

* add table for blog links

* version & changelog
@Tw1sm
fix #12 (#14)
bf0eec9
@Tw1sm
add havoc parser; make pasers more modular
1f9ef94
@Tw1sm
prep for merge
ff0133f
@Tw1sm Tw1sm closed this Oct 30, 2024
@Tw1sm Tw1sm deleted the feature/havoc-parsing branch May 2, 2025 13:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Tw1sm @coffeegist