snovvcrash / KrbRelayUp

Related projects ⓘ

Alternatives and complementary repositories for KrbRelayUp

• snovvcrash / peas
  Modified version of PEAS client for offensive operations
  ☆38Updated last year
• mcorybillington / sshspray
  A multithreaded, queued SSH key and/or password spraying tool.
  ☆17Updated last year
• s0i37 / lateral
  Port forwarding via MSRPC (445/tcp) [WIP]
  ☆31Updated 3 years ago
• d3lb3 / KeePass-the-Hash
  A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…
  ☆30Updated 2 years ago
• blurbdust / ldd2bh
  Convert ldapdomaindump to Bloodhound
  ☆77Updated 11 months ago
• aniqfakhrul / certifried.py
  ☆15Updated 2 years ago
• ZeroPointSecurity / Domain-Enumeration-Tool
  Perform Windows domain enumeration via LDAP
  ☆36Updated 2 years ago
• aas-n / aclpwn.py
  Active Directory ACL exploitation with BloodHound
  ☆12Updated 3 years ago
• snovvcrash / OffensivePipeline
  OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.
  ☆90Updated 2 years ago
• crisprss / magicNetdefs
  Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…
  ☆49Updated 2 years ago
• praetorian-inc / Matryoshka
  Matryoshka loader is a tool that red team operators can leverage to generate shellcode for Microsoft Office document phishing payloads.
  ☆38Updated 3 years ago
• RythmStick / ProxyPunch
  Finding SSL Blindspots for Red Teams
  ☆30Updated 4 years ago
• snovvcrash / PCredz
  This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, …
  ☆16Updated 2 years ago
• s0lst1c3 / SharpFinder
  ☆30Updated 4 years ago
• tothi / CVE-2021-1675
  C# and Impacket implementation (here with Kerberos auth support) of PrintNightmare CVE-2021-1675/CVE-2021-34527
  ☆29Updated 3 years ago
• mobdk / WinBoost
  Execute Mimikatz with different technique
  ☆50Updated 3 years ago
• S3cur3Th1sSh1t / SharpOxidResolver
  IOXIDResolver from AirBus Security/PingCastle
  ☆45Updated 3 years ago
• Tw1sm / aesKrbKeyGen
  Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3
  ☆47Updated 2 years ago
• BC-SECURITY / SocksProxyServer-Plugin
  Socks Proxy Server Plugin for Invoke-SocksProxy
  ☆17Updated last week
• bugch3ck / SharpLdapWhoami
  WhoAmI by asking the LDAP service on a domain controller.
  ☆58Updated 2 years ago
• RomanRII / jenkins-strike
  Cobalt Strike profile generator using Jenkins to automate the heavy lifting
  ☆34Updated last year
• Sh11td0wn / winrm_kerb_shell
  Ruby script that calls an almost interactive shell via WinRM (TCP/5985) on an Windows machine, relaying on a valid Kerberos ticket. (Very…
  ☆16Updated 5 years ago
• CompassSecurity / PowerLsassSilentProcessExit
  ☆24Updated 3 years ago
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆47Updated last year
• NinjaStyle82 / rbcd_permissions
  Add SD for controlled computer object to a target object for RBCD using LDAP
  ☆38Updated 3 years ago
• duckbillsecurity / pdf-smuggler
  Create PDFs with HTML smuggling attachments that save on opening the document.
  ☆27Updated last year
• san3ncrypt3d / AESShellCodeEncrypter
  This is a CS project that will encrypt shell code from msfvenom using AES
  ☆22Updated 2 years ago
• RiccardoAncarani / GPOPowerParser
  A script that parses PowerView's output for GPO analysis. Integrated into bloodhound to find misconfigurations of URA, SMB signing etc
  ☆12Updated 4 years ago
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆53Updated 2 years ago