Merge pull request #55 from Mayyhem/get-secret-updates

Added command to deobfuscate secret strings offline
Mayyhem · Apr 15, 2024 · 0130c71 · 0130c71
2 parents 7d67cfd + a92e445
commit 0130c71
Show file tree

Hide file tree

Showing 3 changed files with 32 additions and 3 deletions.
diff --git a/Program.cs b/Program.cs
@@ -52,6 +52,31 @@ static void Main(string[] args)
                 // Subcommands
                 //
 
+                // deobfuscate command
+                var deobCommand = new Command("deob", "Deobfuscate a policy secret hex string");
+                rootCommand.Add(deobCommand);
+                deobCommand.Add(new Argument<string>("secret-string", "The policy secret hex string to deobfuscate"));
+                deobCommand.Handler = CommandHandler.Create(
+                    (string secretString) =>
+                    {
+                        try
+                        {
+                            bool bDecryptSuccess = Helpers.DecryptDESSecret(secretString, out string deobfuscatedString);
+                            if (bDecryptSuccess)
+                            {
+                                Console.WriteLine($"[+] Deobfuscated secret: {deobfuscatedString}");
+                            }
+                            else
+                            {
+                                Console.WriteLine("[!] Could not deobuscate secret!");
+                            }
+                        }
+                        catch (Exception ex)
+                        {
+                            Console.WriteLine($"[!] Could not deobuscate secret: {ex.Message}");
+                        }
+                    });
+
                 // exec command
                 var execCommand = new Command("exec", "Execute a command, binary, or script on a client or request NTLM authentication from a client\n" +
                     "  Permitted security roles:\n" +

diff --git a/Properties/AssemblyInfo.cs b/Properties/AssemblyInfo.cs
@@ -9,7 +9,7 @@
 [assembly: AssemblyConfiguration("")]
 [assembly: AssemblyCompany("")]
 [assembly: AssemblyProduct("SharpSCCM")]
-[assembly: AssemblyCopyright("© 2023 Chris Thompson (@_Mayyhem)")]
+[assembly: AssemblyCopyright("© 2024 Chris Thompson (@_Mayyhem)")]
 [assembly: AssemblyTrademark("")]
 [assembly: AssemblyCulture("")]
 
@@ -27,5 +27,5 @@
 //      Minor Version
 //      Revision
 //
-[assembly: AssemblyVersion("2.0.8")]
-[assembly: AssemblyFileVersion("2.0.8")]
+[assembly: AssemblyVersion("2.0.9")]
+[assembly: AssemblyFileVersion("2.0.9")]
diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md
@@ -1,5 +1,9 @@
 # SharpSCCM Release Notes
 
+### Version 2.0.9 (April 15, 2024)
+##### Changes
+- Added option to deobfuscate a secret string offline
+
 ### Version 2.0.8 (March 19, 2024)
 ##### Changes
 - Fix from @subat0mik for machines that require FIPS-compliant algorithms (PR #53)