michaelpoznecki / zerologonLinks
Scan for and exploit the zerologon vulnerability.
☆11Updated 4 years ago
Alternatives and similar repositories for zerologon
Users that are interested in zerologon are comparing it to the libraries listed below
Sorting:
- A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.☆94Updated last year
- Convert ldapdomaindump to Bloodhound☆81Updated last year
- User enumeration and password spraying tool for testing Azure AD☆70Updated 3 years ago
- Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.☆54Updated 11 months ago
- Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.☆47Updated 2 years ago
- Microsoft Exchange password spray tool with proxy support.☆40Updated 4 years ago
- Tool for efficient directory enumeration☆57Updated 9 months ago
- The purpose of this repo is to share my research☆14Updated 4 months ago
- ☆52Updated 2 years ago
- Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164")☆57Updated last year
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆58Updated last month
- This repository presents a proof-of-concept of CVE-2023-22527☆12Updated last year
- Simple Python script to sort nuclei scans by severity and URL☆29Updated 2 years ago
- Exploits targeting vBulletin.☆76Updated 2 years ago
- Python script to exploit CVE-2022-22954 and then exploit CVE-2022-22960☆2Updated 3 years ago
- Secretsdump C# version only supporting local (live) operation☆50Updated 3 months ago
- A repository of tools developed while studying for OSEP. The contents here are not part of courseware but some tools, i wrote as an exten…☆2Updated last year
- Analyzes AdminSDHolder permissions & compares with default baseline or a previous run, to detect potential backdoor/excessive persistent …☆15Updated 4 months ago
- Generate password spraying lists based on the pwdLastSet-attribute of users.☆56Updated last year
- Open-Source Phishing Toolkit☆19Updated 4 years ago
- Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3☆59Updated 3 years ago
- A script used to query the dehashed API and filter for more useful results☆17Updated 4 years ago
- Duplicate not owned Token from Running Process☆72Updated 2 years ago
- A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…☆32Updated 2 years ago
- Active Directory share enumeration tool☆12Updated 3 months ago
- List of some AD tools I frequently use☆47Updated 2 months ago
- A script to automatically dump all URLs present in /server-status to a file locally.☆24Updated 6 months ago
- Dump Windows SAM hashes☆42Updated 2 years ago
- Authentication Bypass in GoAnywhere MFT☆63Updated last year
- RCE through a race condition in Apache Tomcat☆56Updated 7 months ago