Skip to content

CHANGELOG.md

Latest commit

聽

History

History
59 lines (50 loc) 路 4.16 KB

CHANGELOG.md

File metadata and controls

59 lines (50 loc) 路 4.16 KB
Raw

Changelog

All notable changes to the RedReason project.

[1.1.0] - 2026-05-25

Added

  • Unified MaturityFlowEngine framework (core/module.py):
    • Enforced modular maturity standards (stage_l0_presence through stage_l3_execution) across the engine framework and all operational modules.
    • Refactored modules/ad_enum.py, modules/ad_attacks.py, and modules/ad_post.py to subclass the abstract lifecycle nicely.
  • Relational Transactional Graph Cache (core/session.py):
    • Migrated legacy flat JSON session cache to a robust SQLite transactional backend database.
    • Added database relation schemas mapping users, computers, group memberships, trusts, and GPOs.
    • Introduced SQL query interfaces and native graph relation traversals (find_high_risk_relation_paths).
  • Stealth Boundary Orchestration (main.py):
    • Linked the CLI --stealth flag to set max_level execution boundaries dynamically across all modular processes.
    • Security Impact: Enabled absolute boundary control to guarantee passive audits stay quiet, enforced fully parameterized queries protecting the database from input injection, and added ACID-compliant transaction-safe rollback logic to prevent data corruption.

[1.0.0] - 2026-01-07

Added

  • Production Hardening Phase:
    • Global Resilience: Top-level exception handling in main.py for graceful failures.
    • Code Standardization: Removal of PoC tags, addition of comprehensive docstrings (e.g., modules/ad_virt.py).
    • Dependency Freeze: Validated usage of impacket, ldap3, pycryptodome in requirements.txt.
    • Versioning: Added VERSION file tracking release 1.0.0.

[0.1.1] - 2026-01-07

Added

  • Module: Exchange Operations (modules/ad_exchange.py):
    • Enumeration of Exchange Servers, Versions, and IPs.
    • Identification of critical groups (Organization Management, Exchange Trusted Subsystem).
    • Detection of PrivExchange vulnerabilities (WriteDACL on Domain).
    • RBAC Auditing: Identification of ApplicationImpersonation and Mailbox Import Export roles.
    • Hybrid Identity: Detection of Azure AD Connect (MSOL_) accounts.
  • Reporting Enhancements (core/report.py):
    • implemented Finding Aggregation to group similar vulnerabilities (e.g., "50 Roastable Users" -> 1 Finding).
    • Added Markdown Tables for Critical Vulnerabilities and Misconfigurations.
    • Introduced Risk Scoring and Emoji visual indicators (馃敶, 馃煚).
    • Added External References (HackTricks, MITRE) for remediation.
  • ADCS Improvements (modules/ad_cs.py):
    • Implemented Template-to-CA Mapping: Vulnerable templates (e.g., ESC1) are now verified against published templates on Enterprise CAs.
    • Improved reporting accuracy to distinguish between "vulnerable template exists" (potentially unexploitable) and "vulnerable template is published" (exploitable).
  • Module: Virtualization Operations (modules/ad_virt.py):
    • Passive Enum: Identification of ESXi/vCenter hosts via LDAP (OS & SPN).
    • Active Fingerprinting: SOAP probing (/sdk/vimService) to extract exact VMware Build Versions.
    • CVE-2024-37085: Detection of "ESX Admins" abuse (Shadow Admin & Group Hijack).
    • Vulnerability Correlation: Mapping fingerprinted versions to critical RCEs (CVE-2021-21972, etc.).

Fixed

  • Critical Stability Fixes:
    • modules/ad_enum.py: Fixed NameError by correctly initializing SessionManager and ensuring check_dcsync_rights is defined.
    • core/report.py: Fixed IndexError during log parsing by making _aggregate_findings robust against malformed log messages.
    • modules/ad_attacks.py: Fixed AttributeError: 'str' object has no attribute 'decode' in GPP password decryption checks (Python 3 string handling).
    • modules/ad_acl.py: Fixed LDAPControlError by removing problematic explicit control flags for SD retrieval, falling back to standard effective rights.

Changed

  • Log Standardization: Updated ad_enum.py and ad_attacks.py log messages to follow VULNERABLE: <Category>: <Details> format for consistent report aggregation.