[SHEHZADE//ABDULLAH ANSARI]
Red Team Consultant @ Google | MS in Cybersecurity @ NYU
● Notice //GitHub (@shehzade) is temporarily suspended pending an automated false-positive review. All tools are hosted on this Code Mirror and available on request (contact); GitHub links will return once reinstated.
Offline extractor and decryptor for SCCM/MECM Network Access Account (NAA) credentials and policy secrets from dead-disk WMI repositories and DPAPI master keys.
$
git clone https://shehzade.io/repos/naa-dump-offline.git
Copy
Source ZIP (290.0 KB)
Prebuilt Binaries
19 lines · 691 B
| 1 | BINARY_NAME=naa-dump-offline |
| 2 | SRC=cmd/naa-dump-offline/main.go |
| 3 | |
| 4 | .PHONY: all build build-all clean |
| 5 | |
| 6 | all: build |
| 7 | |
| 8 | build: |
| 9 | go build -ldflags="-s -w" -o $(BINARY_NAME) $(SRC) |
| 10 | |
| 11 | build-all: |
| 12 | GOOS=linux GOARCH=amd64 go build -ldflags="-s -w" -o $(BINARY_NAME)-linux-amd64 $(SRC) |
| 13 | GOOS=linux GOARCH=arm64 go build -ldflags="-s -w" -o $(BINARY_NAME)-linux-arm64 $(SRC) |
| 14 | GOOS=windows GOARCH=amd64 go build -ldflags="-s -w" -o $(BINARY_NAME).exe $(SRC) |
| 15 | GOOS=darwin GOARCH=amd64 go build -ldflags="-s -w" -o $(BINARY_NAME)-darwin-amd64 $(SRC) |
| 16 | GOOS=darwin GOARCH=arm64 go build -ldflags="-s -w" -o $(BINARY_NAME)-darwin-arm64 $(SRC) |
| 17 | |
| 18 | clean: |
| 19 | rm -f $(BINARY_NAME) $(BINARY_NAME).exe $(BINARY_NAME)-* |