diff --git a/db/modules_metadata_base.json b/db/modules_metadata_base.json index 3f202e77ca1f..b03119a6ac28 100644 --- a/db/modules_metadata_base.json +++ b/db/modules_metadata_base.json @@ -23019,7 +23019,7 @@ }, { "name": "ENUM_UNCONSTRAINED_DELEGATION", - "description": "Dump info about all known objects that allow uncontrained delegation." + "description": "Dump info about all known objects that allow unconstrained delegation." }, { "name": "ENUM_USER_ACCOUNT_DISABLED", @@ -254297,7 +254297,7 @@ "autofilter_ports": null, "autofilter_services": null, "targets": null, - "mod_time": "2021-10-06 13:43:31 +0000", + "mod_time": "2023-10-27 12:46:15 +0000", "path": "/modules/post/windows/gather/credentials/teamviewer_passwords.rb", "is_install_path": true, "ref_name": "windows/gather/credentials/teamviewer_passwords", @@ -259242,6 +259242,67 @@ ] }, + "post_windows/manage/kerberos_tickets": { + "name": "Kerberos Ticket Management", + "fullname": "post/windows/manage/kerberos_tickets", + "aliases": [ + + ], + "rank": 300, + "disclosure_date": null, + "type": "post", + "author": [ + "Will Schroeder", + "Spencer McIntyre" + ], + "description": "Manage kerberos tickets on a compromised host.", + "references": [ + "URL-https://github.com/GhostPack/Rubeus", + "URL-https://github.com/wavvs/nanorobeus" + ], + "platform": "Windows", + "arch": "", + "rport": null, + "autofilter_ports": null, + "autofilter_services": null, + "targets": null, + "mod_time": "2023-10-24 17:32:48 +0000", + "path": "/modules/post/windows/manage/kerberos_tickets.rb", + "is_install_path": true, + "ref_name": "windows/manage/kerberos_tickets", + "check": false, + "post_auth": false, + "default_credential": false, + "notes": { + "Stability": [ + + ], + "Reliability": [ + + ], + "SideEffects": [ + + ] + }, + "session_types": [ + "meterpreter" + ], + "needs_cleanup": null, + "actions": [ + { + "name": "DUMP_TICKETS", + "description": "Dump the Kerberos tickets" + }, + { + "name": "ENUM_LUIDS", + "description": "Enumerate session logon LUIDs" + }, + { + "name": "SHOW_LUID", + "description": "Show the current LUID" + } + ] + }, "post_windows/manage/killav": { "name": "Windows Post Kill Antivirus and Hips", "fullname": "post/windows/manage/killav",