watchtowrlabs / CVE-2024-40711
Pre-Auth Exploit for CVE-2024-40711
☆47Updated 7 months ago
Alternatives and similar repositories for CVE-2024-40711:
Users that are interested in CVE-2024-40711 are comparing it to the libraries listed below
- Source code and examples for PassiveAggression☆55Updated 10 months ago
- Generate password spraying lists based on the pwdLastSet-attribute of users.☆55Updated last year
- Enumerate information from NTLM authentication enabled web endpoints 🔎☆35Updated last year
- Tool to aid in dumping LSASS process remotely☆38Updated 8 months ago
- ☆41Updated 9 months ago
- Lateral Movement via the .NET Profiler☆80Updated 4 months ago
- ☆55Updated 5 months ago
- Automatically extract and decrypt all configured scanning credentials of a Lansweeper instance.☆37Updated 4 months ago
- ☆54Updated 2 months ago
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆56Updated 4 months ago
- Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials us…☆16Updated last year
- PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy☆35Updated last year
- Work, timer, and wait callback example using solely Native Windows APIs.☆87Updated last year
- Proof of Concept Exploit for CVE-2024-9465☆29Updated 6 months ago
- BloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to anal…☆51Updated last week
- ☆71Updated last year
- Enumerate Domain Users Without Authentication☆31Updated 3 months ago
- Dump Kerberos tickets from the KCM database of SSSD☆50Updated 7 months ago
- Nmapurls parses Nmap xml reports from either piped input or command line arg and outputs a list of http(s) URL's to be used in an automat…☆40Updated last year
- Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)☆87Updated 10 months ago
- DFSCoerce exe revisited version with custom authentication☆38Updated last year
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆40Updated 10 months ago
- ☆48Updated 2 years ago
- Beacon Object Files (BOF) for Cobalt Strike.☆28Updated 7 months ago
- To audit the security of read-only domain controllers☆115Updated last year
- Secretsdump C# version only supporting local (live) operation☆47Updated last year
- .NET deserialization hunter☆76Updated 8 months ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆74Updated 2 years ago
- ysoserial.net docker image☆28Updated 6 months ago
- Duplicate not owned Token from Running Process☆72Updated last year