ludus-defender-lab

Ludus Defender Lab Ludus-Range-Konfiguration und Ansible-Rollen für ein Windows-Sicherheitslabor, das für MDE und MDI vorbereitet ist, mit einer vollständig fehlkonfigurierten ADCS-Installation zum Testen der Erkennungsabdeckung. Konfiguration| VMs| Zweck ---|---|--- zsec-mde-mdi-lab.yml| DC01 +...

CVE-2024-38200

CVE-2024-38200 Nach dem Patch Das Erfassen des NTLMv2-Hashes über die HTTP-Methode wurde nicht behoben. Der NTLMv2-Hash-Wert kann weiterhin über HTTP erlangt und an LDAP oder ADCS weitergereicht werden. MSRC erklärte zu dieser Situation: „So wie dargestellt, scheint dies Teil des aktuellen Design...

ADCSDevilCOM

ADCSDevilCOM Uno strumento C per richiedere certificati da ADCS utilizzando DCOM su SMB. Questo strumento consente di richiedere da remoto certificati X.509 dal server CA utilizzando il protocollo MS-WCCE su DCOM e bypassa il requisito tradizionale del mapper di endpoint utilizzando direttamente...

relay_bible

Relay Bible — Leitfaden für Relay-Angriffe bei internen Penetrationstests Eine umfassende Referenz für NTLM-Relay-Angriffe bei autorisierten internen Penetrationstests. Behandelt Authentifizierungsgrundlagen, Coercion-Techniken, Relay-Ziele pro Protokoll, Werkzeuge, fortgeschrittenes Chaining und...

modifyCertTemplate

Scopo Questo strumento è progettato per assistere un operatore nella modifica dei modelli di certificato ADCS in modo che uno stato vulnerabile creato possa essere sfruttato per l'escalation dei privilegi e quindi ripristinare il modello allo stato precedente in seguito. È specificamente progetta...

ADCSKiller

ADCSKiller - Uno strumento di automazione per lo sfruttamento di ADCS ADCSKiller è uno strumento basato su Python progettato per automatizzare il processo di scoperta e sfruttamento delle vulnerabilità di Active Directory Certificate Services ADCS. Sfrutta le funzionalità di Certipy e Coercer per...

Certiception

Certiception Certiception ist ein Honeypot für Active Directory Certificate Services ADCS , entwickelt, um Angreifer mit einem realistischen und attraktiven Köder anzulocken, der hochrelevante Alarme auslöst. Entwickelt vom SRLabs Red Team, erstellt Certiception eine verwundbar wirkende...

RemoteKrbRelay

root@kitploit: //, ,//\ \ / \ \ XXX XXX / //, \o-o/-o-o/ / / \ XXX | / \ / ,-/ / \ / /,| | \ | / \ / ,-,,,/ ,,, CICADA8 Research Team From Michael Zhmaylo MzHmO RemoteKrbRelay Probabilmente conosci KrbRelay e KrbRelayUp, ma se ti dicessi che può essere fatto da remoto? Con RemoteKrbRelay...

Masky

Masky Masky è una libreria Python che fornisce un modo alternativo per ottenere da remoto le credenziali degli utenti del dominio tramite un ADCS. È stato costruito uno strumento a riga di comando basato su questa libreria per raccogliere facilmente PFX, hash NT e TGT su una scala più ampia. Ques...

certificate-of-compromise

Certificato di Compromissione SoK/Whitepaper sulle operazioni offensive contro il Servizio Certificati di Active Directory v1.0.0 Documento Vivo e Contributi della Comunità Questo documento è un documento vivo. La ricerca su ADCS non è statica: le tecniche vengono corrette, vengono scoperte nuove...

ADCSKiller - An ADCS Exploitation Automation Tool Weaponizing Certipy And Coercer

ADCSKiller is a Python-based tool designed to automate the process of discovering and exploiting Active Directory Certificate Services ADCS vulnerabilities. It leverages features of Certipy and Coercer to simplify the process of attacking ADCS infrastructure. Please note that the ADCSKiller is...

Active Directory Certificate Services (ADCS) privilege escalation (Certifried)

This module exploits a privilege escalation vulnerability in Active Directory Certificate Services ADCS to generate a valid certificate impersonating the Domain Controller DC computer account. This certificate is then used to authenticate to the target as the DC account using PKINIT...

Microsoft Patch Tuesday October 2022: Exchange ProxyNotShell RCE, Windows COM+ EoP, AD EoP, Azure Arc Kubernetes EoP

Hello everyone! This episode will be about Microsoft Patch Tuesday for October 2022, including vulnerabilities that were added between September and October Patch Tuesdays. As usual, I use my open source Vulristics project to create the report. Alternative video link for Russia: $ cat...

Masky - Python Library With CLI Allowing To Remotely Dump Domain User Credentials Via An ADCS Without Dumping The LSASS Process Memory

Masky is a python library providing an alternative way to remotely dump domain users' credentials thanks to an ADCS. A command line tool has been built on top of this library in order to easily gather PFX, NT hashes and TGT on a larger scope. This tool does not exploit any new vulnerability and...

modifyCertTemplate - ADCS Cert Template Modification And ACL Enumeration

This tool is designed to aid an operator in modifying ADCS certificate templates so that a created vulnerable state can be leveraged for privilege escalation and then reset the template to its previous state afterwards. This is specifically designed for a scenario where WriteProperty rights over ...

[ADM Cloud] License information is missing on ADM Cloud Service and all managed ADCs enter graceful period

Licenses are missing like below on ADM Cloud Service: And managed ADCs enter graceful period due to no license activation...

adcs-neat.iadcs.ucsd.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-998560 Security Researcher devl00p Helped patch 3018 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting adcs-neat.iadcs.ucsd.edu...