zer1t0 / certiLinks
ADCS abuser
☆299Updated 2 years ago
Alternatives and similar repositories for certi
Users that are interested in certi are comparing it to the libraries listed below
Sorting:
- ☆234Updated 2 years ago
- Dumping LAPS from Python☆276Updated 2 years ago
- Inject remote template link into word document for remote template injection☆179Updated 4 years ago
- Python tool to Check running WebClient services on multiple targets based on @leechristensen☆280Updated 4 years ago
- Python implementation for PetitPotam☆212Updated 3 years ago
- Custom Queries - Brought Up to BH4.1 syntax☆261Updated this week
- Simple script to extract useful informations from the combo BloodHound + Neo4j☆253Updated 5 months ago
- MS-FSRVP coercion abuse PoC☆298Updated 3 years ago
- Password spraying tool and Bloodhound integration☆242Updated 8 months ago
- The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.☆123Updated 5 years ago
- More examples using the Impacket library designed for learning purposes.☆265Updated 2 years ago
- ☆398Updated 4 years ago
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆398Updated 3 weeks ago
- PowerShell Constrained Language Mode Bypass☆278Updated 4 years ago
- Collection of remote authentication triggers in C#☆508Updated last year
- Fork of BloodHound with PKI nodes and edges for Certipy along with some minor personal improvements☆157Updated 3 years ago
- PowerSploit - A PowerShell Post-Exploitation Framework☆237Updated 3 years ago
- AD ACL abuse☆344Updated this week
- Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types☆399Updated 5 months ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆360Updated last year
- Impacket is a collection of Python classes for working with network protocols.☆75Updated last year
- scan for NTLM directories☆368Updated last month
- ☆191Updated 2 weeks ago
- Lists who can read any gMSA password blobs and parses them if the current user has access.☆330Updated last year
- A collection of code snippets built to assist with breaking chains.☆124Updated last year
- ☆89Updated 5 years ago
- PoC to coerce authentication from Windows hosts using MS-WSP☆285Updated 2 years ago
- A tool to query for the existence of pre-windows 2000 computer objects.☆351Updated 3 months ago
- Extracts Key Values from .keytab files☆304Updated 5 years ago
- Python setter/getter for property ms-Mcs-AdmPwd used by LAPS.☆117Updated 10 months ago