puzzlepeaches / Log4jCenter
Exploiting CVE-2021-44228 in vCenter for remote code execution and more.
☆102Updated 3 years ago
Alternatives and similar repositories for Log4jCenter:
Users that are interested in Log4jCenter are comparing it to the libraries listed below
- The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment …☆44Updated 2 years ago
- Convert Cobalt Strike profiles to IIS web.config files☆112Updated 3 years ago
- Impacket is a collection of Python classes for working with network protocols.☆39Updated 3 years ago
- DCSync Attack from Outside using Impacket☆112Updated 3 years ago
- Automatic ProxyShell Exploit☆114Updated 3 years ago
- Active Directory password spraying tool. Auto fetches user list and avoids potential lockouts.☆130Updated 3 years ago
- Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it …☆157Updated 4 years ago
- Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207☆112Updated last year
- GUI alternative to the Rubeus command line tool, for all your Kerberos exploit requirements☆181Updated 3 years ago
- PickleC2 is a post-exploitation and lateral movements framework☆91Updated 3 years ago
- ☆158Updated 3 years ago
- My CobaltStrike BOFS☆164Updated 2 years ago
- Checks for signature requirements over LDAP☆97Updated 2 years ago
- CVE-2021-40444☆65Updated 3 years ago
- Extendable payload obfuscation and delivery framework☆143Updated 2 years ago
- Pass the Hash to a named pipe for token Impersonation☆143Updated 4 years ago
- MSSQL Database Attacker tool☆189Updated 2 years ago
- .Net Assembly loader for the [CVE-2021-42287 - CVE-2021-42278] Scanner & Exploit noPac☆62Updated 2 years ago
- PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.☆107Updated 2 years ago
- A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.☆90Updated last year
- Python port of MailSniper to exfiltrate emails via EWS endpoint☆88Updated 3 years ago
- Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.☆46Updated 4 years ago
- A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY☆81Updated 3 years ago
- A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.☆129Updated last year
- ☆39Updated last year
- Beacon Object File PoC implementation of KillDefender☆227Updated 3 years ago
- Shell Simulation over Net-SNMP with extend functionality☆95Updated 4 years ago
- ☆92Updated 2 years ago
- ☆34Updated 3 years ago
- C# tool to discover low hanging fruits☆93Updated 2 years ago