Azox

While working in an Active Directory environment, I encountered an issue where Impacket tools like `rbcd.py` failed to perform an LDAP bind, even though the credentials were valid. The tool...

Fix/mssql xpcmdshell permission check

8

## Description This PR fixes issue [#959](https://github.com/Pennyw0rth/NetExec/issues/959), where the `enable_cmdshell` MSSQL module displayed `xp_cmdshell successfully enabled` even when the user lacked `RECONFIGURE` permissions. Now, before attempting to enable `xp_cmdshell`, the...

add --proxy option with SOCKS5 support and remote DNS

2

## Description This PR introduces a new `--proxy` option that allows routing all connections through a SOCKS5 proxy with remote DNS resolution (RDNS). ### Motivation Previously, users had to rely...

add ldap3 Kerberos authentication function

8

## Description This PR introduces a **pure-Python LDAP bind routine that uses the `ldap3` library with SPNEGO / Kerberos authentication** (`ldap3_kerberos_login`). Until now NetExec bound over LDAP exclusively with Impacket’s...

Add targeted Kerberoasting by injecting/removing temporary SPNs

1

## Description The attack is possible when the authenticated user has **GenericAll**, **GenericWrite**, **WriteProperty**, or **Validated-SPN rights** over a target account. By adding a temporary SPN (ServicePrincipalName) to such a...

## Description This PR improves the way `secretsdump.py` parses the output of `vssadmin` when retrieving shadow copies. Previously, the code relied on English-specific keywords (e.g. "Shadow Copy ID:", "Volume:"), which...