Luct0r / KerberOPSEC
OPSEC safe Kerberoasting in C#
☆188Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for KerberOPSEC
- ☆143Updated last year
- ☆151Updated 2 weeks ago
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆251Updated last year
- PoC to coerce authentication from Windows hosts using MS-WSP☆225Updated last year
- Determine if the WebClient Service (WebDAV) is running on a remote system☆123Updated 8 months ago
- Investigation about ACL abusing for Active Directory Certificate Services (AD CS)☆119Updated 3 years ago
- Beacon Object File & C# project to check LDAP signing☆174Updated 3 months ago
- The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin☆166Updated last year
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆301Updated 9 months ago
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆258Updated 2 years ago
- ☆241Updated last year
- Source generator to add D/Invoke and indirect syscall methods to a C# project.☆170Updated 8 months ago
- ☆182Updated 7 months ago
- Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus☆226Updated 2 years ago
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆265Updated 2 weeks ago
- ADCS cert template modification and ACL enumeration☆129Updated last year
- ☆112Updated last year
- A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.☆292Updated 2 years ago
- InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…☆184Updated 3 years ago
- Simple C# implementation of PowerUpSQL☆93Updated 4 months ago
- Useful Cobalt Strike BOFs found or used during engagements☆131Updated last year
- Koppeling x Metatwin x LazySign☆203Updated 3 years ago
- Python tool to Check running WebClient services on multiple targets based on @leechristensen☆252Updated 3 years ago
- Timeroasting scripts by Tom Tervoort☆182Updated last year
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆169Updated last month
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆98Updated last year
- COFF file (BOF) for managing Kerberos tickets.☆282Updated last year
- The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.☆110Updated 4 years ago
- Patch AMSI and ETW☆233Updated 6 months ago
- Use ESC1 to perform a makeshift DCSync and dump hashes☆198Updated last year