MWR-CyberSec / PXEThief
PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager
☆322Updated 5 months ago
Related projects ⓘ
Alternatives and complementary repositories for PXEThief
- ☆281Updated 3 weeks ago
- Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types☆372Updated last year
- Some scripts to abuse kerberos using Powershell☆313Updated last year
- ☆660Updated 2 weeks ago
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆452Updated 2 years ago
- Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.☆480Updated last year
- A C# utility for interacting with SCCM☆573Updated 2 months ago
- A tool for pointesters to find candies in SharePoint☆240Updated 2 years ago
- Custom Queries - Brought Up to BH4.1 syntax☆230Updated 3 weeks ago
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆378Updated 7 months ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆301Updated 9 months ago
- Identify the attack paths in BloodHound breaking your AD tiering☆310Updated 2 years ago
- Timeroasting scripts by Tom Tervoort☆182Updated last year
- FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE acces…☆389Updated this week
- DPAPI looting remotely and locally in Python☆425Updated this week
- Dump NTDS with golden certificates and UnPAC the hash☆623Updated 8 months ago
- Finding all things on-prem Microsoft for password spraying and enumeration.☆249Updated 2 years ago
- ☆173Updated 9 months ago
- Malicious shortcut generator for collecting NTLM hashes from insecure file shares.☆307Updated last month
- Fork of BloodHound with PKI nodes and edges for Certipy along with some minor personal improvements☆135Updated 2 years ago
- Abusing Intune for Lateral Movement over C2☆284Updated 3 weeks ago
- Automated Active Directory Enumeration☆416Updated this week
- Simple script to extract useful informations from the combo BloodHound + Neo4j☆198Updated 11 months ago
- Python tool to Check running WebClient services on multiple targets based on @leechristensen☆252Updated 3 years ago
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆265Updated 2 weeks ago
- PowerShell Constrained Language Mode Bypass☆232Updated 3 years ago
- A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user☆249Updated 2 years ago
- Impacket is a collection of Python classes for working with network protocols.☆269Updated last month
- ☆351Updated 3 years ago
- Partial python implementation of SharpGPOAbuse☆363Updated 9 months ago