Yeeb1 / SharpRDPlusSnatcher
Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials used in remote desktop sessions.
☆16Updated last year
Alternatives and similar repositories for SharpRDPlusSnatcher:
Users that are interested in SharpRDPlusSnatcher are comparing it to the libraries listed below
- Automatically extract and decrypt all configured scanning credentials of a Lansweeper instance.☆37Updated 3 months ago
- Python3 rewrite of AsOutsider features of AADInternals☆43Updated 3 months ago
- Impacket pre-compiled binaries☆15Updated last year
- Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆15Updated 2 years ago
- Tool to aid in dumping LSASS process remotely☆37Updated 7 months ago
- Enumerate Domain Users Without Authentication☆30Updated 2 months ago
- Leveraging AWS Lambda Function URLs for C2 Redirection☆31Updated last year
- An old Windows workstations LPE for domain environments without LDAP signing/channel binding.☆31Updated 2 years ago
- A Python based tool to convert custom queries from Legacy BloodHound to BloodHound CE format, with the option to directly upload them to …☆23Updated 2 months ago
- Sniffing files generator☆55Updated 3 weeks ago
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆54Updated 3 years ago
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆108Updated 11 months ago
- CLI tool to interact with the BloodHound CE API☆42Updated 2 months ago
- ☆29Updated 6 months ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆74Updated 2 years ago
- A helper script for consolidating Aggressor and BOF repositories into a single CNA for Cobalt Strike.☆13Updated 11 months ago
- ☆14Updated 2 months ago
- Lateral Movement via the .NET Profiler☆80Updated 3 months ago
- ☆48Updated last year
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆38Updated 8 months ago
- ☆48Updated 2 years ago
- This repository focuses on replicating the behavioral patterns observed in well-documented APT campaigns.☆11Updated last week
- time-based user enum via Basic Auth in Azure against Autodiscover☆32Updated 5 months ago