Skip to content

Commit e5e750d

Browse files
committed
Updated for procdump, handlekatz and procdump either
1 parent 49220a3 commit e5e750d

3 files changed

Lines changed: 15 additions & 1 deletion

File tree

nxc/modules/handlekatz.py

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
import base64
66
import re
77
import sys
8-
8+
from datetime import datetime
99
from nxc.helpers.bloodhound import add_user_bh
1010
from pypykatz.pypykatz import pypykatz
1111

@@ -34,6 +34,10 @@ def options(self, context, module_options):
3434
self.handlekatz_path = "/tmp/"
3535
self.dir_result = self.handlekatz_path
3636
self.useembeded = True
37+
current_time = datetime.now()
38+
time_string = current_time.strftime("%Y%m%d%H%M%S")
39+
padding = time_string.encode()
40+
self.handlekatz_embeded = self.handlekatz_embeded + padding
3741

3842
if "HANDLEKATZ_PATH" in module_options:
3943
self.handlekatz_path = module_options["HANDLEKATZ_PATH"]

nxc/modules/nanodump.py

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,11 @@ def options(self, context, module_options):
5151
self.nano = "nano.exe"
5252
self.nano_path = ""
5353
self.useembeded = True
54+
current_time = datetime.now()
55+
time_string = current_time.strftime("%Y%m%d%H%M%S")
56+
padding = time_string.encode()
57+
self.nano_embedded64 = self.nano_embedded64 + padding
58+
self.nano_embedded32 = self.nano_embedded32 + padding
5459

5560
if "NANO_PATH" in module_options:
5661
self.nano_path = module_options["NANO_PATH"]

nxc/modules/procdump.py

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@
99
from nxc.helpers.bloodhound import add_user_bh
1010
from nxc.paths import TMP_PATH
1111
from os.path import abspath, join
12+
from datetime import datetime
1213

1314

1415
class NXCModule:
@@ -35,6 +36,10 @@ def options(self, context, module_options):
3536
self.procdump_path = abspath(TMP_PATH)
3637
self.dir_result = self.procdump_path
3738
self.useembeded = True
39+
current_time = datetime.now()
40+
time_string = current_time.strftime("%Y%m%d%H%M%S")
41+
padding = time_string.encode()
42+
self.procdump_embeded = self.procdump_embeded + padding
3843

3944
if "PROCDUMP_PATH" in module_options:
4045
self.procdump_path = module_options["PROCDUMP_PATH"]

0 commit comments

Comments
 (0)