Release v2.4.6: security/correctness fixes from full codebase review

Consolidates this session's review findings, each already fixed and
committed individually: Uninstall.ps1 deleting the wrong directory,
plaintext passphrase handling, a DCSync ACL pre-check bypass via UPN
credentials, an orchestrator that crashed instead of returning to its
menu, plaintext-hash exposure window and unauthenticated AES export
in Extract-NTHashes.ps1, KHDB shard-size/backup/dedup issues in
Prepare-KHDBStorage.ps1 and Update-KHDB.ps1, and assorted resource
leaks. See CHANGELOG.md for the full list.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

This commit is contained in:

Tomas Kracmar

2026-07-29 12:10:26 +02:00

parent 5b761d8d56

commit 2d90656e5c

9 changed files with 20 additions and 8 deletions

									
										Elysium.Common.ps1
									
		+1
		-1
	
												View File
												
				@@ -1,4 +1,4 @@

				$script:ElysiumVersion = '2.4.5'

				$script:ElysiumVersion = '2.4.6'

				function Invoke-RestartWithExecutable {

				    param(