Merge pull request #84 from eladshamir/master

Add the option to load a certificate from a Base64 blob
GhostPack · Jun 8, 2021 · e93119a · e93119a
2 parents b5d09df + ffbf0dd
commit e93119a
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/Rubeus/lib/Ask.cs b/Rubeus/lib/Ask.cs
@@ -130,8 +130,16 @@ public static X509Certificate2 FindCertificate(string certificate, string storeP
 
         public static byte[] TGT(string userName, string domain, string certFile, string certPass, Interop.KERB_ETYPE etype, string outfile, bool ptt, string domainController = "", LUID luid = new LUID(), bool describe = false, bool verifyCerts = false) {
             try {
+                X509Certificate2 cert;
 
-                X509Certificate2 cert = FindCertificate(certFile, certPass);
+                if (Helpers.IsBase64String(certFile))
+                {
+                    cert = new X509Certificate2(Convert.FromBase64String(certFile), certPass);
+                }
+                else
+                {
+                    cert = FindCertificate(certFile, certPass);
+                }
 
                 if(cert == null) {
                     Console.WriteLine("[!] Failed to find certificate for {0}", certFile);