Active-Directory-Exploitation-Cheat-Sheet

Cheat Sheet per lo Sfruttamento di Active Directory Questo cheat sheet contiene metodi comuni di enumerazione e attacco per Active Directory di Windows. ℹ️ Questo repository è stato creato da Nikos Katsiopis e Nikos Vourdas. Questo cheat sheet è ispirato al repository PayloadAllTheThings. Sommario...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...

mimikatz

mimikatz mimikatz è uno strumento che ho creato per imparare il C e fare alcuni esperimenti con la sicurezza di Windows. È ora ben noto per estrarre password in chiaro, hash, codici PIN e ticket Kerberos dalla memoria. mimikatz può anche eseguire pass-the-hash, pass-the-ticket o creare Golden...

MakeMeEnterpriseAdmin

Esempio di esecuzione riuscita: root@kitploit: ====================================================================== /\ Elevated domain admins to Enterprise admins - version 1.0 || /||\ Require: domain admin right |:||:| or more specifically DS-Replication-Get-Changes-All |/||| Vincent LE TOUX...

shimit

shimit shimit ist ein Python-Tool, das den Golden-SAML-Angriff implementiert. Weitere Informationen dazu finden Sie im folgenden Artikel in unserem Blog. root@kitploit: python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY...

vulnerable-AD

Vulnerable-AD Crea un active directory vulnerabile che ti permetta di testare la maggior parte degli attacchi a active directory in un laboratorio locale Caratteristiche principali Attacchi Randomizzati Copertura Completa degli attacchi menzionati è necessario eseguire lo script nel DC con Active...

certsync

certsync certsync è una nuova tecnica per dumpare NTDS da remoto, ma questa volta senza DRSUAPI : utilizza golden certificate e UnPAC the hash. Funziona in diverse fasi: 1. Estrai elenco utenti, informazioni CA e CRL da LDAP 2. Estrai certificato CA e chiave privata 3. Forga offline un certificat...

mimikatz

mimikatz mimikatz è uno strumento che ho creato per imparare il C e fare alcuni esperimenti con la sicurezza di Windows. È ormai noto per estrarre password in chiaro, hash, codici PIN e ticket Kerberos dalla memoria. mimikatz può anche eseguire pass-the-hash, pass-the-ticket o costruire Golden...

whiskeysamlandfriends

WhiskeySAML e amici TicketsPlease TicketsPlease: Libreria Python per assistere nella generazione di ticket Kerberos, recupero remoto delle configurazioni ADFS, generazione di token Golden SAML e recupero di token di accesso Azure. WhiskeySAML WhiskeySAML: Strumento proof of concept per un attacco...

shimit

shimit shimit is a python tool that implements the Golden SAML attack. More informations on this can be found in the following article on our blog. root@kitploit: python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

EUVD-2026-46801

Vulnerability in Oracle GoldenGate component: Receiver Service Executable. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate...

EUVD-2026-46802

Vulnerability in Oracle GoldenGate component: Admin Server Executable. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle GoldenGate...

EUVD-2026-46800

Vulnerability in Oracle GoldenGate component: Oracle GoldenGate Microservices. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate...

EUVD-2026-46797

Vulnerability in Oracle GoldenGate component: Admin Server Executable. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successf...

EUVD-2026-46563

Vulnerability in Oracle GoldenGate component: Service Manager. Supported versions that are affected are 19.1.0.0.0-19.29.0.0, 21.3-21.21 and 23.4-23.26.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful...

CVE-2026-61084

Vulnerability in Oracle GoldenGate component: Libraries. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to compromise Orac...

CVE-2026-61079

Vulnerability in Oracle GoldenGate component: Libraries. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to compromise...

CVE-2026-60397

Vulnerability in Oracle GoldenGate component: Admin Server Executable. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the...

CVE-2026-60399

Vulnerability in Oracle GoldenGate component: Receiver Service Executable. Supported versions that are affected are 19.1.0.0.0-19.30.0.0, 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle GoldenGate...