authfinder 1.1.2__tar.gz → 1.1.4__tar.gz

{authfinder-1.1.2 → authfinder-1.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: authfinder
-Version: 1.1.2
+Version: 1.1.4
 Summary: Execute commands across Windows and Linux systems using multiple RCE methods (WinRM, SMB, WMI, RDP, SSH, MSSQL)
 Author: Khael
 Project-URL: Homepage, https://github.com/KhaelK138/authfinder

{authfinder-1.1.2 → authfinder-1.1.4}/authfinder/__init__.py

@@ -1,3 +1,3 @@
 """authfinder: Execute commands across Windows and Linux systems using multiple RCE methods"""
 
-__version__ = "1.1.2"
+__version__ = "1.1.4"

{authfinder-1.1.2 → authfinder-1.1.4}/authfinder/authfinder.py

@@ -229,11 +229,11 @@ def build_cmd(tool, user, target, credential, command):
                 f"{NXC_CMD} smb {target} -p {credential} -u \"{user}\" -X 'powershell -enc {b64}' --exec-method smbexec{nxc_output_flag}")
 
     if tool == "wmi":
-        # we don't actually need to pass the --no-output here, as defender won't catch it regardless it seems
-        # additionally, adding --no-output makes it very difficult to differentiate between command execution and a successful authentication w/o execution
-        return (f"{NXC_CMD} wmi {target} -H {hash_val} -u \"{user}\" -X 'powershell -enc {b64}'"
+        # we don't actually need to pass the --no-output here, as defender won't catch it with this specific `cmd /c "powershell -enc` combo
+        # additionally, adding --no-output makes it very difficult to differentiate between command execution and a successful authentication w/o execution for wmi specifically
+        return (f"{NXC_CMD} wmi {target} -H {hash_val} -u \"{user}\" -X 'cmd /c \"powershell -enc {b64}\"'"
                 if use_hash else
-                f"{NXC_CMD} wmi {target} -p {credential} -u \"{user}\" -X 'powershell -enc {b64}'")
+                f"{NXC_CMD} wmi {target} -p {credential} -u \"{user}\" -X 'cmd /c \"powershell -enc {b64}\"'")
 
     if tool == "ssh":
         if LINUX_MODE:
@@ -335,7 +335,7 @@ def run_chain(user, ip, credential, command, tool_list=None):
                 safe_print(f"  \033[33m[!]\033[0m For {ip}: {tool} AUTHENTICATION succeeded as {user} with {credential}, but this seems like a Linux machine, so the command didn't run.")
                 safe_print("  \033[33m[!]\033[0m Use \033[33m--linux\033[0m to run command across Linux machines.")
                 continue
-            if '[+]' in out and 'Executed command' not in out:
+            if '[+]' in out and '[+] Executed' not in out:
                 safe_print(f"  \033[33m[!]\033[0m For {ip}: {tool} AUTHENTICATION succeeded as {user} with {credential}, but seemingly failed to run command. Does the user have the necessary permissions?")
                 continue
             if rc == 0 and out == "":

{authfinder-1.1.2 → authfinder-1.1.4}/authfinder.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: authfinder
-Version: 1.1.2
+Version: 1.1.4
 Summary: Execute commands across Windows and Linux systems using multiple RCE methods (WinRM, SMB, WMI, RDP, SSH, MSSQL)
 Author: Khael
 Project-URL: Homepage, https://github.com/KhaelK138/authfinder

{authfinder-1.1.2 → authfinder-1.1.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "authfinder"
-version = "1.1.2"
+version = "1.1.4"
 description = "Execute commands across Windows and Linux systems using multiple RCE methods (WinRM, SMB, WMI, RDP, SSH, MSSQL)"
 readme = "README.md"
 authors = [