From cde1d83045ba97e5a20ed70fa9b6a6f4fe5e241c Mon Sep 17 00:00:00 2001
From: Scott Sutherland <nullbind@users.noreply.github.com>
Date: Sun, 6 Oct 2024 20:34:14 -0500
Subject: [PATCH] Update PowerHuntShares.psm1

---
 PowerHuntShares.psm1 | 99 +++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 98 insertions(+), 1 deletion(-)

diff --git a/PowerHuntShares.psm1 b/PowerHuntShares.psm1
index a34ae2c..4f2846d 100644
--- a/PowerHuntShares.psm1
+++ b/PowerHuntShares.psm1
@@ -4,7 +4,7 @@
 #--------------------------------------
 # Author: Scott Sutherland, 2024 NetSPI
 # License: 3-clause BSD
-# Version: v1.147
+# Version: v1.148
 # References: This script includes custom code and code taken and modified from the open source projects PowerView, Invoke-Ping, and Invoke-Parrell. 
 function Invoke-HuntSMBShares
 {    
@@ -1624,6 +1624,7 @@ function Invoke-HuntSMBShares
         $FileNamePatternsAll.Rows.Add("*jmx-console-users.properties","","None.","Secret","")                | Out-Null
         $FileNamePatternsAll.Rows.Add("*dbvis.xml","","None.","Secret","")                                   | Out-Null
         $FileNamePatternsAll.Rows.Add("*remmina.pref","","None.","Secret","")                                | Out-Null
+        $FileNamePatternsAll.Rows.Add("*.remmina","","None.","Secret","Get-PwRemmina")                       | Out-Null
         $FileNamePatternsAll.Rows.Add("*credentials.xml","Used for Jenkins.","None.","Secret","")            | Out-Null
         $FileNamePatternsAll.Rows.Add("*lastpass*","","None.","Secret","")                                   | Out-Null
         $FileNamePatternsAll.Rows.Add("*thycotic*","","None.","Secret","")                                   | Out-Null
@@ -26695,3 +26696,99 @@ function Get-PwNetrc {
     # Output the result
     return $entries
 }
+
+# Author: Scott Sutherland, NetSPI (@_nullbind / nullbind)
+# Intended input: .remmina file
+function Get-PwRemmina {
+    param (
+        [string]$ComputerName = $null,
+        [string]$ShareName    = $null,
+        [string]$UncFilePath  = $null,
+        [string]$FileName     = $null,
+        [string]$FilePath     # Required
+    )
+
+    # Array to hold individual records
+    $outputArray = @()
+
+    # Check if the file exists
+    if (-not (Test-Path -Path $FilePath)) {
+        Write-Host "File not found at path: $FilePath"
+        return $outputArray
+    }
+
+    # Read the file content and parse for each protocol setting
+    $fileContent = Get-Content -Path $FilePath
+
+    # Initialize variables for each record type
+    $vncSettings = @{
+        ComputerName = $ComputerName
+        ShareName    = $ShareName
+        UncFilePath  = $UncFilePath
+        FileName     = $FileName
+        Section      = "NA"
+        ObjectName   = "VNC"
+        TargetURL    = "NA"
+        TargetServer = "NA"
+        TargetPort   = "NA"
+        Database     = "NA"
+        Domain       = "NA"
+        Username     = "NA"
+        Password     = "NA"
+        PasswordEnc  = "NA"
+        KeyFilePath  = "NA"
+    }
+    
+    $sshSettings = @{
+        ComputerName = $ComputerName
+        ShareName    = $ShareName
+        UncFilePath  = $UncFilePath
+        FileName     = $FileName
+        Section      = "NA"
+        ObjectName   = "SSH"
+        TargetURL    = "NA"
+        TargetServer = "NA"
+        TargetPort   = "NA"
+        Database     = "NA"
+        Domain       = "NA"
+        Username     = "NA"
+        Password     = "NA"
+        PasswordEnc  = "NA"
+        KeyFilePath  = "NA"
+    }
+
+    # Parse each line and fill in the appropriate settings
+    foreach ($line in $fileContent) {
+        if ($line -match "^protocol=(.+)") {
+            $protocol = $matches[1].Trim()
+            if ($protocol -eq "VNC") {
+                $vncSettings["ObjectName"] = "VNC"
+            } elseif ($protocol -eq "SSH") {
+                $sshSettings["ObjectName"] = "SSH"
+            }
+        }
+        elseif ($line -match "^server=(.+)") {
+            $vncSettings["TargetServer"] = $matches[1].Trim()
+        } elseif ($line -match "^listenport=(\d+)") {
+            $vncSettings["TargetPort"] = $matches[1].Trim()
+        } elseif ($line -match "^username=(.+)") {
+            $vncSettings["Username"] = $matches[1].Trim()
+        } elseif ($line -match "^password=(.+)") {
+            $vncSettings["Password"] = $matches[1].Trim()
+        }
+        elseif ($line -match "^ssh_server=(.+)") {
+            $sshSettings["TargetServer"] = $matches[1].Trim()
+        } elseif ($line -match "^ssh_username=(.+)") {
+            $sshSettings["Username"] = $matches[1].Trim()
+        } elseif ($line -match "^ssh_privatekey=(.+)") {
+            $sshSettings["KeyFilePath"] = $matches[1].Trim()
+        }
+    }
+
+    # Add each filled record to the output array
+    $outputArray += [PSCustomObject]$vncSettings
+    $outputArray += [PSCustomObject]$sshSettings
+
+    # Return the array of records
+    return $outputArray
+}