A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
☆168Feb 19, 2025Updated last year
Alternatives and similar repositories for ketshash
Users that are interested in ketshash are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.☆141Mar 7, 2018Updated 8 years ago
- Test Blue Team detections without running any attack.☆272May 2, 2024Updated 2 years ago
- when pass change ,send the pass to remote host☆20Jan 19, 2020Updated 6 years ago
- Detect and abuse risky SPNs☆266Jun 15, 2017Updated 9 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆163Apr 11, 2017Updated 9 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- PowerShell Obfuscation Detection Framework☆756Dec 1, 2023Updated 2 years ago
- A script for advanced discovery of Privileged Accounts - includes Shadow Admins☆829Sep 9, 2019Updated 7 years ago
- ntlm relay attack to Exchange Web Services☆331Jan 15, 2018Updated 8 years ago
- Powershell Empire Persistence finder☆118Jan 30, 2017Updated 9 years ago
- Exfiltrate data with ICMP☆101Jan 31, 2018Updated 8 years ago
- PowerShell oneliner to retrieve wdigest passwords from the memory☆221Dec 11, 2017Updated 8 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆264Nov 30, 2018Updated 7 years ago
- Powershell-based Windows Security Auditing Toolbox☆572Jan 9, 2019Updated 7 years ago
- Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.☆400May 20, 2020Updated 6 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- This project is just a dumping ground for random scripts I've developed.☆138Aug 14, 2024Updated 2 years ago
- SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over…☆381Aug 17, 2018Updated 8 years ago
- goddi (go dump domain info) dumps Active Directory domain information☆424May 31, 2022Updated 4 years ago
- DNS-Shell is an interactive Shell over DNS channel☆531Oct 11, 2020Updated 6 years ago
- An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.☆305Sep 7, 2022Updated 4 years ago
- Find accounts using common and default passwords in Active Directory.☆70Sep 19, 2019Updated 7 years ago
- Powershell Threat Hunting Module☆292Sep 21, 2016Updated 10 years ago
- This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support.☆410Dec 24, 2019Updated 6 years ago
- Robber is open source tool for finding executables prone to DLL hijacking☆799Jul 8, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- PowerShell script to find 'vulnerable' security-related GPOs that should be hardended☆197Jun 1, 2018Updated 8 years ago
- ☆350Mar 19, 2021Updated 5 years ago
- A tool that implements the Golden SAML attack☆347Oct 15, 2018Updated 8 years ago
- Powershell C2 Server and Implants☆575Nov 11, 2019Updated 6 years ago
- This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.☆384Jun 25, 2024Updated 2 years ago
- The PowerThIEf, an Internet Explorer Post Exploitation library☆127Feb 27, 2025Updated last year
- Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.☆491Feb 16, 2019Updated 7 years ago
- PowerShell Runspace Post Exploitation Toolkit☆1,551Aug 2, 2019Updated 7 years ago
- ☆181Feb 21, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Query and report user logons relations from MS Windows Security Events☆243Aug 9, 2018Updated 8 years ago
- Remove individual lines from Windows Event Viewer Log (EVT) files☆45Apr 17, 2021Updated 5 years ago
- The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.☆97Oct 11, 2017Updated 9 years ago
- PowerShell Pass The Hash Utils☆1,815Dec 9, 2018Updated 7 years ago
- Smb Scanner from PingCastle☆125Apr 9, 2019Updated 7 years ago
- Run PowerShell with rundll32. Bypass software restrictions.☆1,832Mar 17, 2021Updated 5 years ago
- Discover "HotSpots" - potential spots for credentials theft☆24Apr 12, 2018Updated 8 years ago