{ "info": { "author": "m8r0wn", "author_email": "m8r0wn@protonmail.com", "bugtrack_url": null, "classifiers": [ "Environment :: Console", "License :: OSI Approved :: GNU General Public License v3 or later (GPLv3+)", "Programming Language :: Python :: 3", "Topic :: Security" ], "description": "# ActiveReign\n\n

\n \n
\n  \n  \n \n \n \"follow\n

\n\n### Background\nA while back I was challenged to write a discovery tool with Python3 that could automate the process of finding sensitive information on network file shares. After writing the entire tool with pysmb, and adding features such as the ability to open and scan docx an xlsx files, I slowly started adding functionality from the awesome [Impacket](https://github.com/SecureAuthCorp/impacket) library; just simple features I wanted to see in an internal penetration testing tool. The more I added, the more it looked like a Python3 rewrite of [CrackMapExec](https://github.com/byt3bl33d3r/CrackMapExec) created from scratch. \n \nIf you are doing a direct comparison, [CME](https://github.com/byt3bl33d3r/CrackMapExec) is an amazing tool that has way more features than currently implement here. However, I added a few new features and modifications that may come in handy during an assessment.\n### For more documentation checkout the project [wiki](https://github.com/m8r0wn/ActiveReign/wiki)\n\n### Operational Modes\n* db - Query or insert values in to the ActiveReign database\n* enum - System enumeration & module execution\n* shell - Spawn a simulated shell on the target system and perform command execution\n* spray - Domain password spraying and brute force\n* query - Perform LDAP queries on the domain\n\n\n### Key Features\n* Automatically extract domain information via LDAP and incorporate into network enumeration.\n* Perform Domain password spraying using LDAP to remove users close to lockout thresholds.\n* Local and remote command execution, for use on multiple starting points throughout the network.\n* Simulated interactive shell on target system, with file upload and download capabilities.\n* Data discovery capable of scanning xlsx and docx files.\n* Various modules to add and extend capabilities.\n\n\n### Acknowledgments\nThere were many intended and unintended contributors that made this project possible. If I am missing any, I apologize, it was in no way intentional. Feel free to contact me and we can make sure they get the credit they deserve ASAP!\n* [@byt3bl33d3r](https://github.com/byt3bl33d3r) - [CrackMapExec](https://github.com/byt3bl33d3r/CrackMapExec)\n* [@SecureAuthCorp](https://github.com/SecureAuthCorp) - [Impacket](https://github.com/SecureAuthCorp/impacket)\n* [@the-useless-one](https://github.com/the-useless-one) - [pywerview](https://github.com/the-useless-one/pywerview)\n* [@dirkjanm](https://github.com/dirkjanm) - [ldapdomaindump](https://github.com/dirkjanm/ldapdomaindump)\n\n### Final Thoughts\n\nWriting this tool and testing on a variety of networks/systems has taught me that execution method matters, and depends on the configuration of the system. If a specific module or feature does not work, determine if it is actually the program, target system, configuration, or even network placement before creating an issue.\n\nTo help this investigation process, I have created a ```test_execution``` module to run against a system with known admin privileges. This will cycle through all all execution methods and provide a status report to determine the best method to use:\n```bash\n$ activereign enum -u administrator -p Password123 --local-auth -M test_execution 192.168.1.1\n[*] Lockout Tracker Threshold extracted from database: 5\n[*] Enum Authentication \\administrator (Password: P****) (Hash: False)\n[+] DC01 192.168.1.1 ENUM Windows Server 2008 R2 Standard 7601 Service Pack 1 (Domain: DEMO) (Signing: True) (SMBv1: True) (Adm!n) \n[*] DC01 192.168.1.1 TEST_EXECUTION Testing execution methods \n[*] DC01 192.168.1.1 TEST_EXECUTION Execution Method: WMIEXEC Fileless: SUCCESS Remote (Defualt): SUCCESS\n[*] DC01 192.168.1.1 TEST_EXECUTION Execution Method: SMBEXEC Fileless: SUCCESS Remote (Defualt): SUCCESS\n[*] DC01 192.168.1.1 TEST_EXECUTION Execution Method: ATEXEC Fileless: SUCCESS Remote (Defualt): SUCCESS\n[*] DC01 192.168.1.1 TEST_EXECUTION Execution Method: WINRM Fileless: N/A Remote (Defualt): SUCCESS\n```", "description_content_type": "text/markdown", "docs_url": null, "download_url": "", "downloads": { "last_day": -1, "last_month": -1, "last_week": -1 }, "home_page": "https://github.com/m8r0wn/ActiveReign", "keywords": "", "license": "GPLv3", "maintainer": "", "maintainer_email": "", "name": "ActiveReign", "package_url": "https://pypi.org/project/ActiveReign/", "platform": "", "project_url": "https://pypi.org/project/ActiveReign/", "project_urls": { "Homepage": "https://github.com/m8r0wn/ActiveReign" }, "release_url": "https://pypi.org/project/ActiveReign/1.0.3/", "requires_dist": null, "requires_python": "", "summary": "A network enumeration and attack toolset", "version": "1.0.3" }, "last_serial": 5986011, "releases": { "0.0.2": [ { "comment_text": "", "digests": { "md5": "1f36f254047dee8d68368837a0513301", "sha256": "ead85b5ba510f1816300d193103274d5cc1f21bb9c16491118b3a1f385f2c1b3" }, "downloads": -1, "filename": "ActiveReign-0.0.2.tar.gz", "has_sig": false, "md5_digest": "1f36f254047dee8d68368837a0513301", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 44177, "upload_time": "2019-09-05T19:12:08", "url": "https://files.pythonhosted.org/packages/80/c3/9355af51179e1ab191af65514641b82cc6503bd057058a57f9a3b7233664/ActiveReign-0.0.2.tar.gz" } ], "0.1.1": [ { "comment_text": "", "digests": { "md5": "dd2272e8c753fb5e7034a2cc884999a8", "sha256": "b0650fc28d278bce8542ba0b458cbda134db652097d41475da57a7decd0abe38" }, "downloads": -1, "filename": "ActiveReign-0.1.1.tar.gz", "has_sig": false, "md5_digest": "dd2272e8c753fb5e7034a2cc884999a8", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 53805, "upload_time": "2019-09-19T13:31:26", "url": "https://files.pythonhosted.org/packages/f9/67/4c5243bfc560f21f8f4cd766d5612f9163187ee622ef4329532067ccffe5/ActiveReign-0.1.1.tar.gz" } ], "1.0.1": [ { "comment_text": "", "digests": { "md5": "af011a233cb41daf8010629590e762b6", "sha256": "fdf0042ae81e9b8a1dd50d4e2daec5db1e0a2af6a6a814d6733a942dde4c5431" }, "downloads": -1, "filename": "ActiveReign-1.0.1.tar.gz", "has_sig": false, "md5_digest": "af011a233cb41daf8010629590e762b6", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 59807, "upload_time": "2019-10-07T17:46:46", "url": "https://files.pythonhosted.org/packages/72/b6/e1886a4c9251684151b91330a7b502d4e011098c2bcf059046e6dac42e56/ActiveReign-1.0.1.tar.gz" } ], "1.0.2": [ { "comment_text": "", "digests": { "md5": "f0ae37866ed633cf864ff070d057d248", "sha256": "ceabfa27dc4b7f7905dc66517ad99f3631a7bbd9e4fcb230fae61185ad14e264" }, "downloads": -1, "filename": "ActiveReign-1.0.2.tar.gz", "has_sig": false, "md5_digest": "f0ae37866ed633cf864ff070d057d248", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 59848, "upload_time": "2019-10-07T18:10:06", "url": "https://files.pythonhosted.org/packages/a0/ed/7caef8ce70ed5e3cb56caeefdf51c3c26d1506742816fc75a56248e04767/ActiveReign-1.0.2.tar.gz" } ], "1.0.3": [ { "comment_text": "", "digests": { "md5": "fb37a98c7f56612f661d38c801c4631f", "sha256": "6a5fe84dfe7f1cab56ef08d28873ff475cc729c7395ec19634dd616f49eda0ae" }, "downloads": -1, "filename": "ActiveReign-1.0.3.tar.gz", "has_sig": false, "md5_digest": "fb37a98c7f56612f661d38c801c4631f", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 63612, "upload_time": "2019-10-16T19:30:54", "url": "https://files.pythonhosted.org/packages/a3/c5/ab4ad5c33ae26d539cc57e28214ce3fb1f233ef92510bbc894eb7324c030/ActiveReign-1.0.3.tar.gz" } ] }, "urls": [ { "comment_text": "", "digests": { "md5": "fb37a98c7f56612f661d38c801c4631f", "sha256": "6a5fe84dfe7f1cab56ef08d28873ff475cc729c7395ec19634dd616f49eda0ae" }, "downloads": -1, "filename": "ActiveReign-1.0.3.tar.gz", "has_sig": false, "md5_digest": "fb37a98c7f56612f661d38c801c4631f", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 63612, "upload_time": "2019-10-16T19:30:54", "url": "https://files.pythonhosted.org/packages/a3/c5/ab4ad5c33ae26d539cc57e28214ce3fb1f233ef92510bbc894eb7324c030/ActiveReign-1.0.3.tar.gz" } ] }