Repository navigation
Sync with upstream Pennyw0rth/NetExec (536 commits) - #7
Merged
Merged
Conversation
Add AGENTS.md file for guiding LLM agents
…xternal references
…the scan A VNC server that completes the TCP connect and then stops responding during the RFB handshake left `await self.conn.connect()` outstanding forever, with no output and no error. On one engagement a single host held a run for the full hour its external timeout allowed, and nothing was scanned in that time. The target timeout alone does not cover this: the connect succeeds, so the hang is in the handshake that follows. RDP already bounds the equivalent call with `asyncio.wait_for` and exposes `--rdp-timeout`; VNC now does the same through `--vnc-timeout`, which is also passed to RDPTarget. A timeout is reported as a timeout rather than as a rejected password, because nothing was authenticated. It is caught as `asyncio.TimeoutError`, which is only an alias of the builtin from Python 3.11 and this project supports 3.10. Claude-Session: https://claude.ai/code/session_01BrqBUZro8vxfBMGniTyfDV
Add --cat argument for NFS
…rsion Restrict dploot to v3
…-timeout fix(vnc): bound the connection so an unresponsive server cannot hang the scan
Remove Python 3.10
Signed-off-by: BepuSun <bepu.business@gmail.com>
[WMI] Add SAM, LSA and NTDS dump
Only mark RDP hosts Pwn3d when a real session actually opens
…y-final # Conflicts: # nxc/protocols/rdp.py
…Error; warn on -X too
…ity-final [Draft] Fix RDP command execution reliability
The Pennyw0rth/Certipy fork, synced with ly4k/Certipy main (incl. Pennyw0rth#348), is now published on PyPI as certipy-nxc 5.1.0.post1. The fork keeps Python 3.11 support and allows impacket 0.14.0.dev. uv.lock overrides exclude-newer for certipy-nxc so it can be locked right after publishing. Fixes pip/pipx installs, which failed after the fork was renamed. Tested certipy-find against an AD CS lab on Python 3.11 and 3.13.
…eeps the lockfile
|
It looks like the PR template may not have been filled out. The following sections appear to be missing:
Please edit your PR description to include them. The template helps reviewers understand and test your changes. Thanks! |
Merge upstream main while preserving BLS-specific customizations: - Keep BLS impacket, BloodHound.py, and oscrypto forks - Keep stealth_label config and mark_stealth functionality - Adopt upstream's certipy-nxc PyPI package (fixes broken certipy-ad git dep) - Adopt upstream's CI improvements (pinned actions, setup-uv, Python 3.14) - Adopt upstream's sanitize_path_component, Win2025+ atexec fix, DC detection, guest account check, display_dc, skip_self, exclude_hosts, and other features
aconite33
force-pushed
the
upstream-sync-2026-10-15
branch
from
October 15, 2026 21:29
54aabf3 to
9ad4964
Compare
Remove unused `os` import in rdp.py and extra blank line in smb.py.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
certipy-nxcPyPI package fix (replaces brokencertipy-adgit dependency)astral-sh/setup-uv, Python 3.14 test matrixsanitize_path_component, Win2025+ atexec fix, DC detection, guest account check,display_dc/skip_self/exclude_hostsconfig options, sharing violation logging, new modules (rclone, shadow-creds, tombstone, resetnightmare)Conflict Resolution
Conflicts were resolved in 14 files, keeping BLS changes over upstream where they diverged:
Test plan
pip install ./uv synccompletes without errorsnxc smb 127.0.0.1to confirm module loadinguv run ruff check . --preview