NetExec module for collecting and parsing 1C Enterprise configuration files from Windows targets via SMB.

• Collects 6 types of 1C config files from user profiles
• Parses ibases.v8i: server-based (Srvr/Ref) and file-based (File) databases, version, app
• Parses 1cestart.cfg: launcher settings (UTF-16-LE)
• Parses def.usr: last logged-in 1C username (multi-encoding: utf-8-sig, utf-8, cp1251, utf-16-le)
• Parses appsrvrs.lst: application server addresses
• Parses nethasp.ini: HASP license server addresses (NH_SERVER_ADDR)
• Collects 1cv8conn.pfl (binary connection profiles, not parsed)
• Detects 1C Application Server installation (Program Files\1cv8\srvinfo)
• User enumeration: Windows Registry (admin) with SMB fallback
• Supports both modern (Vista+: Users, AppData\Roaming) and legacy (XP/2003: Documents and Settings, Application Data) Windows paths
• Exports per-user files + aggregated host_summary.json with database deduplication

# From latest release
curl -sL https://github.com/HexArchy/onec-conf-fetcher/releases/latest/download/onec_conf_fetcher.py \
  -o ~/.nxc/modules/onec_conf_fetcher.py

# Or from source
cp src/onec_conf_fetcher.py ~/.nxc/modules/

# Basic scan
nxc smb <target> -u <user> -p <pass> -M onec_conf_fetcher

# With export
nxc smb <target> -u <user> -p <pass> -M onec_conf_fetcher -o EXPORT=true OUTPUT=/tmp/out

# Subnet scan
nxc smb 192.168.1.0/24 -u admin -p pass -M onec_conf_fetcher -o EXPORT=true

Note: Use a single -o with space-separated options. Multiple -o flags overwrite each other in NXC.

Paths are resolved under %APPDATA% (AppData\Roaming on Vista+, Application Data on XP/2003).

OUTPUT/
  <host_ip>/
    host_summary.json        # aggregated summary
    <username>/
      ibases.v8i
      1cestart.cfg
      ...
    _server_/                # server-side configs (if detected)
      server_nethasp.ini

Contains:

• Host info (IP, hostname, domain)
• All enumerated users and which have 1C configs
• Unique databases (server-based and file-based) with user mapping
• Unique 1C server addresses
• Last 1C usernames per Windows user
• License server addresses
• Launcher settings and app server lists
• 1C Application Server detection flag

• Python 3.12+
• NetExec
• impacket >= 0.12.0

MIT