Merge pull request Pennyw0rth#788 from Pennyw0rth/opsec

Author: mpgn

nxc/config.py

@@ -36,7 +36,6 @@
 audit_mode = nxc_config.get("nxc", "audit_mode", fallback=False)
 reveal_chars_of_pwd = int(nxc_config.get("nxc", "reveal_chars_of_pwd", fallback=0))
 config_log = nxc_config.getboolean("nxc", "log_mode", fallback=False)
-ignore_opsec = nxc_config.getboolean("nxc", "ignore_opsec", fallback=False)
 host_info_colors = literal_eval(nxc_config.get("nxc", "host_info_colors", fallback=["green", "red", "yellow", "cyan"]))
 
 

nxc/data/nxc.conf

@@ -5,7 +5,6 @@ pwn3d_label = Pwn3d!
 audit_mode = 
 reveal_chars_of_pwd = 0
 log_mode = False
-ignore_opsec = True
 host_info_colors = ["green", "red", "yellow", "cyan"]
 
 [BloodHound]

nxc/loaders/moduleloader.py

@@ -33,9 +33,6 @@ def module_is_sane(self, module, module_path):
         elif not hasattr(module, "supported_protocols"):
             self.logger.fail(f"{module_path} missing the supported_protocols variable")
             module_error = True
-        elif not hasattr(module, "opsec_safe"):
-            self.logger.fail(f"{module_path} missing the opsec_safe variable")
-            module_error = True
         elif not hasattr(module, "multiple_hosts"):
             self.logger.fail(f"{module_path} missing the multiple_hosts variable")
             module_error = True
@@ -98,7 +95,6 @@ def get_module_info(self, module_path):
                     "description": module_spec.description,
                     "options": module_spec.options.__doc__,
                     "supported_protocols": module_spec.supported_protocols,
-                    "opsec_safe": module_spec.opsec_safe,
                     "multiple_hosts": module_spec.multiple_hosts,
                     "requires_admin": bool(hasattr(module_spec, "on_admin_login") and callable(module_spec.on_admin_login)),
                 }

nxc/modules/adcs.py

@@ -13,7 +13,6 @@ class NXCModule:
     name = "adcs"
     description = "Find PKI Enrollment Services in Active Directory and Certificate Templates Names"
     supported_protocols = ["ldap"]
-    opsec_safe = True
     multiple_hosts = True
 
     def __init__(self, context=None, module_options=None):

nxc/modules/add-computer.py

@@ -16,7 +16,6 @@ class NXCModule:
     name = "add-computer"
     description = "Adds or deletes a domain computer"
     supported_protocols = ["smb"]
-    opsec_safe = True
     multiple_hosts = False
 
     def options(self, context, module_options):

nxc/modules/aws-credentials.py

@@ -8,7 +8,6 @@ class NXCModule:
     name = "aws-credentials"
     description = "Search for aws credentials files."
     supported_protocols = ["ssh", "smb", "winrm"]
-    opsec_safe = True
     multiple_hosts = True
 
     def __init__(self):

nxc/modules/backup_operator.py

@@ -13,7 +13,6 @@ class NXCModule:
     name = "backup_operator"
     description = "Exploit user in backup operator group to dump NTDS @mpgn_x64"
     supported_protocols = ["smb"]
-    opsec_safe = True
     multiple_hosts = True
 
     def __init__(self, context=None, module_options=None):

nxc/modules/badsuccessor.py

@@ -79,7 +79,6 @@ class NXCModule:
     name = "badsuccessor"
     description = "Check if vulnerable to bad successor attack (DMSA)"
     supported_protocols = ["ldap"]
-    opsec_safe = True
     multiple_hosts = True
 
     def __init__(self):

nxc/modules/bitlocker.py

@@ -9,7 +9,6 @@ class NXCModule:
     name = "bitlocker"
     description = "Enumerating BitLocker Status on target(s) If it is enabled or disabled."
     supported_protocols = ["smb", "wmi"]
-    opsec_safe = True
     multiple_hosts = True
 
     def __init__(self, context=None, module_options=None):

nxc/modules/change-password.py

@@ -12,7 +12,6 @@ class NXCModule:
     name = "change-password"
     description = "Change or reset user passwords via various protocols"
     supported_protocols = ["smb"]
-    opsec_safe = True
     multiple_hosts = False
 
     def options(self, context, module_options):