Flangvik / ADCSPwnLinks
A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.
☆41Updated 4 years ago
Alternatives and similar repositories for ADCSPwn
Users that are interested in ADCSPwn are comparing it to the libraries listed below
Sorting:
- A little scanner to check the LDAP Signing state☆46Updated 4 years ago
- SharpBuster is a C# implementation of a directory brute forcing tool. It's designed to be used via Cobalt Strike's execute-assembly and s…☆63Updated 5 years ago
- ☆70Updated 4 years ago
- A BOF port of the research of @thefLinkk and @codewhitesec☆99Updated 4 years ago
- PoC to interact with local/remote registry hives through WMI☆87Updated 5 years ago
- Execute Mimikatz with different technique☆51Updated 4 years ago
- C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll☆62Updated 6 years ago
- Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions☆53Updated 3 years ago
- Checks for signature requirements over LDAP☆98Updated 3 years ago
- ☆94Updated 3 years ago
- Outlook persistence using VSTO add-ins☆87Updated 4 years ago
- Determine if the WebClient Service (WebDAV) is running on a remote system☆27Updated 4 years ago
- Run PowerShell command without invoking powershell.exe☆35Updated 4 years ago
- Get or remove RunMRU values☆58Updated 6 years ago
- Tool for interacting with outlook interop during red team engagements☆146Updated 4 years ago
- AMSI Bypass Via the Heap☆107Updated 5 years ago
- POC for .NET mssql client for accessing database data through beacon☆63Updated 2 years ago
- .NET 4.0 Scheduled Job Lateral Movement☆90Updated 5 years ago
- Aggressor Script to Execute Assemblies from Github☆71Updated 5 years ago
- Active Directory certificate abuse.☆38Updated 3 years ago
- pyForgeCert is a Python equivalent of the ForgeCert.☆69Updated 2 years ago
- C# port of LogServiceCrash☆46Updated 5 years ago
- ☆67Updated 3 years ago
- AutoStart teamserver and listeners with services☆75Updated 3 years ago
- ☆98Updated 4 years ago
- MSBuild without MSbuild.exe☆134Updated 4 years ago
- quick 'n dirty poc based on PoC windows auth prompt in c# based on https://gist.githubusercontent.com/mayuki/339952/raw/2c36b735bc51861a3…☆31Updated 5 years ago
- IOXIDResolver from AirBus Security/PingCastle☆51Updated 5 years ago
- Service Enumeration C# .NET Assembly☆59Updated 4 years ago
- ☆71Updated 5 years ago