BronzeBee / DavRelayUpLinks
An old Windows workstations LPE for domain environments without LDAP signing/channel binding.
☆33Updated 2 years ago
Alternatives and similar repositories for DavRelayUp
Users that are interested in DavRelayUp are comparing it to the libraries listed below
Sorting:
- Secretsdump C# version only supporting local (live) operation☆50Updated 2 months ago
- Get Fine Grained Password Policy☆70Updated 2 months ago
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆56Updated 3 years ago
- CLI tool to interact with the BloodHound CE API☆51Updated 3 weeks ago
- SuperSharpShares is a tool designed to automate enumerating domain shares, allowing for quick verification of accessible shares by your a…☆74Updated last year
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆75Updated 2 years ago
- time-based user enum via Basic Auth in Azure against Autodiscover☆32Updated 9 months ago
- ☆88Updated 2 years ago
- ☆71Updated 3 weeks ago
- Python3 rewrite of AsOutsider features of AADInternals☆50Updated 6 months ago
- ☆49Updated last year
- Sliver extension performing TCP redirection tasks without performing cross-process injection.☆66Updated 5 months ago
- tool for requesting Entra ID's P2P certificate and authenticating remote Entra joinned devices with it☆111Updated 3 weeks ago
- Tool for issuing manual LDAP queries which offers bofhound compatible output☆52Updated last year
- ☆52Updated 2 years ago
- An impacket-lite cli tool that combines many useful impacket functions using a single session.☆51Updated this week
- Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3☆55Updated 3 years ago
- Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket.☆95Updated last year
- Leveraging AWS Lambda Function URLs for C2 Redirection☆36Updated last year
- Run Cobalt Strike BOFs in Brute Ratel C4!☆68Updated 2 months ago
- ☆36Updated last year
- Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆15Updated 3 years ago
- TokenCert☆98Updated 7 months ago
- A Python POC for CRED1 over SOCKS5☆151Updated 9 months ago
- Golang search engine scraper intended for identification of published ClickOnce deployments☆75Updated 7 months ago
- Lateral Movement via the .NET Profiler☆82Updated 7 months ago
- Scripts for public use that we've randomly written, or have updated from other people's work.☆40Updated last year
- Click Once + App Domain☆62Updated last year
- OAuth Device Code Phishing Toolkit☆62Updated 2 months ago
- WhoAmI by asking the LDAP service on a domain controller.☆63Updated 3 years ago