OUned

OUned OUned परियोजना, एक शोषण उपकरण है जो gPLink हेरफेर के माध्यम से Organizational Units ACLs के दुरुपयोग को स्वचालित करता है। हमले के पीछे के सिद्धांत, आवश्यक सेटअप तथा उपकरण का उपयोग कैसे करें, इसके विस्तृत विवरण के लिए, आप संबंधित लेख देख सकते हैं:...

ldap_shell

LDAP-Shell Dieses Projekt ist ein Fork von ldapshell aus Impacket. Es bietet eine interaktive Shell für die Active-Directory-Erkundung und -Verwaltung über LDAP/LDAPS-Protokolle und ist sowohl für Systemadministratoren als auch für Sicherheitsexperten nützlich. Installation Diese Tools sind nur m...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation root@kitploit: pip install...

acltoolkit

acltoolkit acltoolkit est un couteau suisse pour les abus ACL. Il implémente de multiples abus ACL. Table des matières acltoolkit Table des matières Installation Utilisation Commandes get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation...

CVE-2025-14740

Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling of the C:\ProgramData\DockerDesktop directory. The installer creates this directory without proper ownership verification, creating two exploitation scenarios: Scenario 1...

LDAP shell - AD ACL Abuse

This repository contains a small tool inherited from ldapshell https://github.com/SecureAuthCorp/impacket/blob/master/impacket/examples/ldapshell.py. Installation These tools are only compatible with Python 3.5+. Clone the repository from GitHub, install the dependencies and you should be good to...

targetedKerberoast - Kerberoast With ACL Abuse Capabilities

targetedKerberoast is a Python script that can, like many others e.g. GetUserSPNs.py, print "kerberoast" hashes for user accounts that have a SPN set. This tool brings the following additional feature: for each user without SPNs, it tries to set one abuse of a write permission on the...