Skip to content

Adding winreg CLI and capabilities#2

Closed
Ebrix wants to merge 27 commits intogpotter2:masterfrom
Ebrix:master
Closed

Adding winreg CLI and capabilities#2
Ebrix wants to merge 27 commits intogpotter2:masterfrom
Ebrix:master

Conversation

@Ebrix
Copy link

@Ebrix Ebrix commented Sep 3, 2025

This PR aims at adding two capabilities to scapy-red:

  1. A cli to navigate in the Windows registries from a remote host in the same fashion as the other script of this project (at least as best as I could fit in)
  2. A wrapper above a part of the MS-RRP RPC

I guess the code may end-up split into different projects or directories (scapy, utils, etc.). Yet, as I did not feel legitimate to propose a global project architecture, I leave it to you and wait for your suggestions.

Comment on lines +729 to +744
f"""
[!] STATUS_LOGON_FAILURE - {e} You used:
- UPN {UPN},
- password {password},
- target {target},
- guest {guest},
- kerberos {kerberos},
- kerberos_required {kerberos_required},
- HashNt {HashNt},
- HashAes128Sha96 {HashAes128Sha96},
- HashAes256Sha96 {HashAes256Sha96},
- ST {ST},
- KEY {KEY}

[💡 TIPS] If you want to use a local account you may use something like: UPN = "WORKGROUP\\\\Administrator" or UPN = "Administrator@WORKGROUP" or "Administrator@192.168.1.2"
"""

Check failure

Code scanning / CodeQL

Clear-text logging of sensitive information High

This expression logs
sensitive data (password)
as clear text.
This expression logs
sensitive data (password)
as clear text.
This expression logs
sensitive data (password)
as clear text.
This expression logs
sensitive data (password)
as clear text.
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hm, it feels to me that it helps with the debugging to make sure that the program understood properly what you passed as an argument. Moreover, you typed those secrets in your terminal, so they will likely end-up in your bash history.

@gpotter2 gpotter2 closed this Mar 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants