VbScrub / Rubeus-GUI
GUI alternative to the Rubeus command line tool, for all your Kerberos exploit requirements
☆178Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for Rubeus-GUI
- MSSQL Database Attacker tool☆185Updated 2 years ago
- MS-FSRVP coercion abuse PoC☆274Updated 2 years ago
- A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY☆77Updated 2 years ago
- DCSync Attack from Outside using Impacket☆111Updated 2 years ago
- Active Directory password spraying tool. Auto fetches user list and avoids potential lockouts.☆126Updated 2 years ago
- Python implementation for PetitPotam☆184Updated 3 years ago
- Local privilege escalation from SeImpersonatePrivilege using EfsRpc.☆304Updated 2 years ago
- A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.☆124Updated last year
- Python3 script to quickly get various information from a domain controller through his LDAP service.☆170Updated 3 weeks ago
- Automatic ProxyShell Exploit☆114Updated 3 years ago
- A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.☆147Updated 3 years ago
- C# version of Powermad☆156Updated 11 months ago
- Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus☆226Updated 2 years ago
- Proof-of-concept tools for my AD Forest trust research☆186Updated 5 months ago
- Pass the Hash to a named pipe for token Impersonation☆294Updated 11 months ago
- PoC to coerce authentication from Windows hosts using MS-WSP☆225Updated last year
- Use python to perform Kerberos pre-auth bruteforcing☆188Updated last year
- Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon☆322Updated 2 years ago
- Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207☆109Updated last year
- Beacon Object File PoC implementation of KillDefender☆214Updated 2 years ago
- Fileless atexec, no more need for port 445☆325Updated 7 months ago
- From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller☆399Updated 2 years ago
- Python tool to Check running WebClient services on multiple targets based on @leechristensen☆252Updated 3 years ago
- C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection☆239Updated 3 years ago
- official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)☆231Updated 2 years ago
- Dumping LSASS with a duplicated handle from custom LSA plugin☆199Updated 2 years ago
- Repository contains psexec, which will help to exploit the forgotten pipe☆162Updated 2 weeks ago
- Extendable payload obfuscation and delivery framework☆141Updated 2 years ago
- A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.☆292Updated 2 years ago