new module: smb > rclone

[crosscutsaw]

Description

a high privilege module that scans rclone.conf in c:\users\*\appdata\roaming\rclone\ and deobscures passwords in its content. the module skips if rclone.conf is encrypted.

Type of change

• [x] New feature (non-breaking change which adds functionality)
• [x] This change requires a documentation update

How Has This Been Tested?

-based on my rclone.conf with hetzner storage box + crypt folder setup -a user with administrative privileges against a computer

Screenshots (if appropriate):

normally, rclone.conf looks like this without config encryption:

module in action:

Checklist:

• [x] I have ran Ruff against my changes (via poetry: poetry run python -m ruff check . --preview, use --fix to automatically fix what it can)
• [ ] I have added or updated the tests/e2e_commands.txt file if necessary
• [x] New and existing e2e tests pass locally with my changes
• [x] My code follows the style guidelines of this project (should be covered by Ruff above)
• [x] If reliant on third party dependencies, such as Impacket, dploot, lsassy, etc, I have linked the relevant PRs in those projects
• [x] I have performed a self-review of my own code
• [x] I have commented my code, particularly in hard-to-understand areas
• [ ] I have made corresponding changes to the documentation (PR here: https://github.com/Pennyw0rth/NetExec-Wiki)

[crosscutsaw]

https://github.com/Pennyw0rth/NetExec/pull/654/commits/170efd36e965a4b0bae89e5124e977a57b659b25

updated module with legacy windows support and improved encrypted config handling & logging.

[NeffIsBack]

Thanks for the contribution, looks like cool stuff! Gonna take a look at it when i have the time!

[crosscutsaw]

in https://github.com/Pennyw0rth/NetExec/pull/654/commits/04aca03a9f0c939971c46e79e70c0c08ceeb3900 update i tried to make it least code execution possible