From f810b06fd00054cbc1c7cf96472d910dfddf1068 Mon Sep 17 00:00:00 2001 From: Scott Sutherland Date: Fri, 19 Jul 2024 10:52:22 -0500 Subject: [PATCH] Update PowerHuntShares.psm1 small update to secrets word list. --- PowerHuntShares.psm1 | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/PowerHuntShares.psm1 b/PowerHuntShares.psm1 index 8a98df7..e653062 100644 --- a/PowerHuntShares.psm1 +++ b/PowerHuntShares.psm1 @@ -4,7 +4,7 @@ #-------------------------------------- # Author: Scott Sutherland, 2024 NetSPI # License: 3-clause BSD -# Version: v1.79 +# Version: v1.80 # References: This script includes custom code and code taken and modified from the open source projects PowerView, Invoke-Ping, and Invoke-Parrell. function Invoke-HuntSMBShares { @@ -2425,13 +2425,15 @@ function Invoke-HuntSMBShares "my.*", "mysql.user*", "nginx.conf*", + "*ntds.dit*", "pg_hba.conf*", "php.ini*", "putty.reg*", "postgresql.conf*", - "SAM", + "SAM", "SAM-*", "SAM_*", + "SYSTEM", "server.xml*", "shadow*", "standalone.xml*",