CrackMapExec

Non più mantenuto Questo progetto non è più mantenuto a causa dell'esistenza di un fork ostile. CrackMapExec Ti trovi nel repository più aggiornato del progetto CrackMapExec ! 🎉 🚧 Se vuoi segnalare un problema, apri un Issue 🔀 Se vuoi contribuire, apri una Pull Request 💬 Se vuoi discutere, apri u...

impersonate

Impersonate विवरण इस रिपॉजिटरी में वे टूलिंग्स हैं जो निम्नलिखित ब्लॉग पोस्ट https://sensepost.com/blog/2022/abusing-windows-tokens-to-compromise-active-directory-without-touching-lsass/ लिखते समय विकसित की गई थीं। ब्लॉग पोस्ट में टोकन हेरफेर आंतरिक तंत्र कैसे काम करता है और हम इसका उपयोग अपने ला...

CrackMapExecWin

CrackMapExecWin Descrizione Il grande tool CrackMapExec compilato per Windows Caratteristiche Ultima versione 2.2 Compilato per x86 quindi dovrebbe funzionare su piattaforme x86 e x64 Utilizzo 1. Scarica l'archivio completo 2. Estrailo ed esegui crackmapexec.exe 3. Guadagna Versioni precedenti...

PsMapExec

PsMapExec 🚀 Cos'è PsMapExec? PsMapExec è un framework di post-sfruttamento basato su PowerShell, fortemente ispirato ai noti strumenti CrackMapExec / NetExec. Porta l'aspetto e le funzioni familiari di questi strumenti nel PowerShell nativo, con il proprio arsenale di miglioramenti. Questo...

A-Red-Teamer-diaries

Diari di un Red-Teamer Note accessibili pubblicamente sui miei esperimenti di pentesting/red teaming testati su diversi ambienti/infrastrutture controllati che coinvolgono l'uso di vari strumenti e tecniche utilizzati da penetration tester e redteam durante una valutazione di sicurezza. Progetto ...

NetExec

🚩 This is the open source repository of NetExec maintained by a community of passionate people NetExec - The Network Execution Tool This project was initially created in 2015 by @byt3bl33d3r, known as CrackMapExec. In 2019 @mpgnx64 started maintaining the project for the next 4 years, adding a lo...

atomic-red-team

Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber Attacks

A hacktivist group known as Twelve has been observed using an arsenal of publicly available tools to conduct destructive cyber attacks against Russian targets. "Rather than demand a ransom for decrypting data, Twelve prefers to encrypt victims' data and then destroy their infrastructure with a...

linWinPwn - A Bash Script That Automates A Number Of Active Directory Enumeration And Vulnerability Checks

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks. The script leverages and is dependent of a number of tools including: impacket, bloodhound, crackmapexec, ldapdomaindump, lsassy, smbmap, kerbrute, adidnsdump. Setup Git clone the reposito...

DarthSidious - Building An Active Directory Domain And Hacking It

The goal is simple To share my modest knowledge about hacking Windows systems. This is commonly refered to as red team exercises. This book however, is also very concerned with the blue team; the defenders. That is, helping those who are working as defenders, analysts and security experts to buil...

SharpMapExec - A Sharpen Version Of CrackMapExec

A sharpen version of CrackMapExec. This tool is made to simplify penetration testing of networks and to create a swiss army knife that is made for running on Windows which is often a requirement during insider threat simulation engagements. Besides scanning for access it can be used to identify...

Chafer APT Hits Middle East Govs With Latest Cyber-Espionage Attacks

Researchers have uncovered new cybercrime campaigns from the known Chafer advanced persistent threat APT group. The attacks have hit several air transportation and government victims in hopes of data exfiltration. The Chafer APT has been active since 2014 and has previously launched cyber espiona...

Lsassy - Extract Credentials From Lsass Remotely

Python library to remotely extract credentials. This blog post explains how it works. You can check the wiki This library uses impacket project to remotely read necessary bytes in lsass dump and pypykatz to extract credentials. Requirements Python = 3.6 pypykatz = 0.3.0 impacket Installation From...

ActiveReign - A Network Enumeration And Attack Toolset

Background A while back I was challenged to write a discovery tool with Python3 that could automate the process of finding sensitive information on network file shares. After writing the entire tool with pysmb, and adding features such as the ability to open and scan docx an xlsx files, I slowly...

RedHunt OS v2 - Virtual Machine For Adversary Emulation And Threat Hunting

Virtual Machine for Adversary Emulation and Threat Hunting by RedHunt Labs RedHunt OS aims to be a one stop shop for all your threat emulation and threat hunting needs by integrating attacker's arsenal as well as defender's toolkit to actively identify the threats in your environment. Base Machin...

Scavenger - Is A Multi-Threaded Post-Exploitation Scanning Tool For Scavenging Systems, Finding Most Frequently Used Files And Folders As Well As "Interesting" Files Containing Sensitive Information

scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information. Problem Definition: Scavenger confronts a challenging issue typically faced by Penetration Testin...

CrackMapExec v3.1.5 - A Swiss Army Knife For Pentesting Networks

CrackMapExec a.k.a CME is a post-exploitation tool that helps automate assessing the security of large Active Directory networks. Built with stealth in mind, CME follows the concept of "Living off the Land": abusing built-in Active Directory features/protocols to achieve it's functionality and...

Pentesting Active Directory Environments: CrackMapExec

Pentesting Active Directory Environments: CrackMapExec CrackMapExec a.k.a CME is a post-exploitation tool that helps automate assessing the security of large Active Directory networks. Built with stealth in mind, CME follows the concept of “Living off the Land”: abusing built-in Active Directory...

CrackMapExec - A swiss army knife for pentesting Windows/Active Directory environments

CrackMapExec is your one-stop-shop for pentesting Windows/Active Directory environments! From enumerating logged on users and spidering SMB shares to executing psexec style attacks and auto-injecting Mimikatz into memory using Powershell! The biggest improvements over the above tools are: Pure...