ludus-defender-lab

Ludus Defender Lab Ludus-Range-Konfiguration und Ansible-Rollen für ein Windows-Sicherheitslabor, das für MDE und MDI vorbereitet ist, mit einer vollständig fehlkonfigurierten ADCS-Installation zum Testen der Erkennungsabdeckung. Konfiguration| VMs| Zweck ---|---|--- zsec-mde-mdi-lab.yml| DC01 +...

ADCSDevilCOM

ADCSDevilCOM Uno strumento C per richiedere certificati da ADCS utilizzando DCOM su SMB. Questo strumento consente di richiedere da remoto certificati X.509 dal server CA utilizzando il protocollo MS-WCCE su DCOM e bypassa il requisito tradizionale del mapper di endpoint utilizzando direttamente...

ADCSync

ADCSsync Dies ist ein Tool, das ich schnell zusammengestellt habe, um DCSync mittels ESC1 durchzuführen. Es ist recht langsam, aber dennoch eine effektive Methode, einen provisorischen DCSync-Angriff ohne Nutzung von DRSUAPI oder Volume Shadow Copy durchzuführen. Dies ist die erste Version des...

Certipy

Certipy - AD CS Angriffs- und Aufzählungs-Toolkit Certipy ist ein leistungsstarkes offensives und defensives Toolkit zur Aufzählung und zum Missbrauch von Active Directory Certificate Services AD CS. Es hilft Red Teamern, Penetrationstestern und Verteidigern, AD CS-Fehlkonfigurationen zu bewerten...

ADCSKiller

ADCSKiller - Uno strumento di automazione per lo sfruttamento di ADCS ADCSKiller è uno strumento basato su Python progettato per automatizzare il processo di scoperta e sfruttamento delle vulnerabilità di Active Directory Certificate Services ADCS. Sfrutta le funzionalità di Certipy e Coercer per...

Misconfigured Certificate Template Finder

class MetasploitModule 'Misconfigured Certificate Template Finder', 'Description' = %q This module allows users to query a LDAP server for vulnerable certificate templates and will print these certificates out in a table along with which attack they are vulnerable to and the SIDs that can be used...

ADCSync - Use ESC1 To Perform A Makeshift DCSync And Dump Hashes

This is a tool I whipped up together quickly to DCSync utilizing ESC1. It is quite slow but otherwise an effective means of performing a makeshift DCSync attack without utilizing DRSUAPI or Volume Shadow Copy. This is the first version of the tool and essentially just automates the process of...

AD CS Certificate Template Management

This module can create, read, update, and delete AD CS certificate templates from a Active Directory Domain Controller. The READ, UPDATE, and DELETE actions will write a copy of the certificate template to disk that can be restored using the CREATE or UPDATE actions. The CREATE and UPDATE actions...

ICPR Certificate Management

Request certificates via MS-ICPR Active Directory Certificate Services. Depending on the certificate template's configuration the resulting certificate can be used for various operations such as authentication. PFX certificate files that are saved are encrypted with a blank password. This module ...

Misconfigured Certificate Template Finder

This module allows users to query a LDAP server for vulnerable certificate templates and will print these certificates out in a table along with which attack they are vulnerable to and the SIDs that can be used to enroll in that certificate template. Additionally the module will also print out a...