Stephen Bradshaw

Here is an impacket example that allows a user account password to be reset to a new plaintext or LM:NTLM hash value. I noticed impacket had a "change" password example...

Hey @mwielgoszewski , not sure if you're still maintaining this code based on the other PRs, but this is an update for the code to work with Python 3. If...

SOCKS functionality no longer working

10

Hi Looks like the SOCKS functionality is no longer working properly in poseidon as tested on x86_64 Linux Ubuntu 16.06.6 LTS kernel 4.4.0-121-generic when using the http communication profile. This...

Using SOCKS on Linux causes CPU utilisation to jump to 100%

4

**Describe the bug** Starting the SOCKS functionality on a Linux deployment of the Athena agent causes CPU utilisation for the Athena process on the agent host to jump to 100%....

PR to enable older OS support as referenced here: https://github.com/login-securite/DonPAPI/issues/44

User enumeration missing users stored under "Documents and Settings" on older Windows versions

2

Hi Ive noticed that when enumerating older Windows Operating System versions that use the "%SystemDrive%\Documents and Settings" path to store user profiles that users are not correctly identified due to...

This PR provides the capability to override the default HTML/JavaScript redirect template with an alternate format string. Currently inline in the config file given the length of the default value...

Reminder to myself - look at other XML parsing libraries in Python to see if using something other than lxml will allow more practical/realistic blind exploitation of the vulnerability.

Fix for force_post to allow interception without evilginx session

3

This is a fix for an issue where EvilGinx will not do force_post replacement for requests to a phished domain if cookies (in particular the EvilGinx session cookie) are not...