8000 Using SecureString for strPass in WMIConnect · Issue #1 · nccgroup/WMIcmd · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Using SecureString for strPass in WMIConnect #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
athiasjerome opened this issue May 22, 2017 · 5 comments
Open

Using SecureString for strPass in WMIConnect #1

athiasjerome opened this issue May 22, 2017 · 5 comments

Comments

@athiasjerome
Copy link

Suggested:
public void WMIConnect(string strDomain, string strUser, SecureString strPass)
@olliencc
Copy link

So the process is only relatively short lived. What risk do you foresee as-is?

@kempy007
Copy link
kempy007 commented Jun 5, 2017

Perhaps also allow interactive input of the password and masque the input.
The risk would be passwords stored in process monitoring logs such as Sysinternals Sysmon, Carbon Black and any other EDR tools. Fab tool by the way 👍

@olliencc
Copy link
olliencc commented Jun 6, 2017

@kempy007 yep not a problem.. will look to work on this ideally this week.

olliencc pushed a commit that referenced this issue Jun 24, 2017
add prompt for password per issue #1
87e6035
@olliencc
Copy link

initial commit for this is now in 87e6035

@kempy007
Copy link

Have tested, but -a option always results in failed login and account lockout.
[!] Failed to connect Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@athiasjerome @olliencc @kempy007
0