MWR-CyberSec / AD-CS-Forest-ExploiterLinks
Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
☆101Updated last year
Alternatives and similar repositories for AD-CS-Forest-Exploiter
Users that are interested in AD-CS-Forest-Exploiter are comparing it to the libraries listed below
Sorting:
- List of some AD tools I frequently use☆48Updated last week
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆60Updated 4 months ago
- Active Directory Authentication Library☆80Updated last week
- This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion☆90Updated 2 months ago
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆71Updated last year
- ☆59Updated last year
- ☆85Updated 5 months ago
- Lateral Movement☆124Updated 2 years ago
- Microsoft Telnet Client MS-TNAP Server-Side Authentication Token Exploit☆59Updated 6 months ago
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆136Updated last week
- Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…☆118Updated 4 months ago
- Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)☆76Updated last year
- ☆89Updated 4 months ago
- Proof Of Concepts☆53Updated 3 months ago
- PfSense Stored XSS lead to Arbitrary Code Execution exploit☆48Updated 10 months ago
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆177Updated 5 months ago
- Inject RDPThief into memory with PowerShell.☆65Updated 9 months ago
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆148Updated last year
- ☆44Updated 3 weeks ago
- Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.☆82Updated last year
- Fully automated windows credentials dumper, for SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with…☆78Updated 11 months ago
- Neo4LDAP is a query and visualization tool focused on Active Directory environments. It combines LDAP syntax with graph-based data analys…☆88Updated this week
- ☆161Updated last year
- ☆149Updated 6 months ago
- Exploit for the CVE-2024-5806☆45Updated last year
- Proof of Concept Exploit for CVE-2024-9464☆45Updated last year
- ☆68Updated 9 months ago
- Small toolkit for extracting information and dumping sensitive strings from Windows processes☆115Updated last year
- ☆92Updated 9 months ago
- Go collector for adding Ansible WorX and Ansible Tower attack paths to BloodHound with OpenGraph☆61Updated 3 months ago