MWR-CyberSec / AD-CS-Forest-ExploiterLinks
Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
☆103Updated 2 years ago
Alternatives and similar repositories for AD-CS-Forest-Exploiter
Users that are interested in AD-CS-Forest-Exploiter are comparing it to the libraries listed below
Sorting:
- List of some AD tools I frequently use☆56Updated 2 months ago
- ☆86Updated 7 months ago
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆61Updated 6 months ago
- Active Directory Authentication Library☆86Updated 2 months ago
- Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)☆76Updated last year
- ☆59Updated last year
- This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion☆92Updated 4 months ago
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆71Updated last year
- Lateral Movement☆125Updated 2 years ago
- Convert your shellcode into an ASCII string☆124Updated 6 months ago
- Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…☆122Updated 6 months ago
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆162Updated 2 months ago
- Microsoft Telnet Client MS-TNAP Server-Side Authentication Token Exploit☆62Updated 8 months ago
- Go collector for adding Ansible WorX and Ansible Tower attack paths to BloodHound with OpenGraph☆63Updated this week
- Proof Of Concepts☆54Updated last week
- Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.☆86Updated 10 months ago
- PoC that downloads an executable from a public SSL certificate☆135Updated 5 months ago
- PfSense Stored XSS lead to Arbitrary Code Execution exploit☆49Updated last year
- Enumerate active EDR's on the system☆147Updated 3 months ago
- Neo4LDAP is a query and visualization tool focused on Active Directory environments. It combines LDAP syntax with graph-based data analys…☆93Updated last month
- this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)☆83Updated 2 years ago
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆42Updated last year
- ☆47Updated 2 months ago
- Advanced In-Memory PowerShell Process Injection Framework☆72Updated 5 months ago
- ProfileHound - BloodHound OpenGraph collector for user profiles stored on domain machines. Make informed decisions about looting secrets …☆111Updated last week
- Microsoft Network Service Fingerprinting Tool☆58Updated last week
- Dump Windows SAM hashes☆42Updated 2 years ago
- Inject RDPThief into memory with PowerShell.☆65Updated 11 months ago
- Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.☆82Updated last year
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆54Updated last year