DigiPwn

DigiPwn Digispark KickStarter ATtiny85 USB Development Board The ATtiny85 based mini development board is similar to the Arduino, but cheaper and smaller of course a bit less powerful. With a whole host of shields to extend its functionality and the ability to use the familiar Arduino IDE, this...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

impacket

Impacket 저작권 Fortra, LLC 및 그 계열사. 모든 권리 보유. Impacket은 원래 SecureAuth에 의해 만들어졌으며, 현재 Fortra의 Core Security가 유지 관리하고 있습니다. Impacket은 네트워크 프로토콜을 다루기 위한 Python 클래스 모음입니다. Impacket은 패킷에 대한 저수준 프로그래밍 액세스와 일부 프로토콜예: SMB1-3 및 MSRPC의 프로토콜 구현 자체를 제공하는 데 중점을 둡니다. 패킷은 처음부터 구성하거나 원시 데이터에서 구문 분석할 수 있으며, 객체 지향...

NegoExRelay

Negoexrelayx - Negoex relaying tool Toolkit for abusing Kerberos PKU2U and NegoEx. Requires impacket It is recommended to install impacket from git directly to have the latest version available. negoexrelayx.py This tool allows you to relay NegoEx with PKU2U authentication to other copmuter and...

CVE-2020-1472-LAB

ZeroLogon testing script A lab setup to test a vulnerability for the ZeroLogon exploit CVE-2020-1472. It contains a Python script that uses the Impacket library to test the vulnerability, and a Virtual Machine VM with Windows Server 2019 configured as a Domain Controller DC. The script attempts t...

CVE-2021-31800

Impacket SECUREAUTH LABS. Copyright C 2022 SecureAuth Corporation. All rights reserved. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to the packets and for some protocols e.g. SMB1-3 and MSRPC the...

Zerologon-Attack-CVE-2020-1472-POC

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...

ntlm_relay_gat

NTLM Relay Gat 説明 NTLM Relay Gatは、Impacketツールスイートのntlmrelayx.pyを使用してNTLMリレーの悪用を自動化するように設計された強力なツールです。ntlmrelayx.pyの機能を活用することで、NTLM Relay GatはNTLMリレーの脆弱性を悪用するプロセスを効率化し、SMB共有の一覧表示からMSSQLデータベースでのコマンド実行まで、さまざまな機能を提供します。 特徴 マルチスレッドサポート : 複数のスレッドを使用してアクションを同時に実行します。 SMB共有の列挙 : 利用可能なSMB共有を一覧表示します。...

CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Installation Before running the exploit you need t...

ZerologonWithImpacket-CVE2020-1472

Zerologon and Impacket Combination Exploit CVE-2020-1472 This repository contains an updated implementation 2024 of the Zerologon exploit combined with Impacket tools to exploit CVE-2020-1472 Zerologon. This exploit targets Windows Server environments to manipulate machine account passwords and...

zerologon

ZeroLogon エクスプロイトスクリプト エクスプロイトコードは https://www.secura.com/blog/zero-logon および https://github.com/SecuraBV/CVE-2020-1472 に基づいています。元の研究とスキャナーは Secura によるもので、RiskSense Inc. が修正を加えています。 エクスプロイトするには、既存の Impacket インストールをすべて削除し、https://github.com/SecureAuthCorp/impacket/commit/b867b21 以降の Impacket...

ticket_converter

This script is no longer supported Use the impacket example ticketConverter.py. ticketconverter A little tool to convert ccache tickets into kirbi KRB-CRED and vice versa based on impacket. As input you must provide a ccache or kirbi file. The script will detect the format and convert it...

keimpx

はじめに keimpxはオープンソースツールで、Apache License 2.0の下で公開されています。 SMB経由でネットワーク全体の有効な認証情報を迅速に確認するために使用できます。認証情報は以下の形式が可能です： ユーザー名 / プレーンテキストパスワード の組み合わせ。 ユーザー名 / NTLMハッシュ の組み合わせ。 ユーザー名 / NTLMログオンセッショントークン の組み合わせ。 攻撃フェーズ後にネットワーク全体で有効な認証情報が発見された場合、ユーザーは接続先のホストと使用する有効な認証情報を選択するよう求められます。その後、インタラクティブなSMBシェル...

CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook リモートコード実行脆弱性 PoC 🚀 使用方法 このスクリプトを使用する前に、ターゲットシステムの所有者から適切な許可と承認を得ていることを確認してください。 前提条件 Python 3.x impacket-smbserver 使用例 sudo python3 CVE-2024-21413.py 🛠️ 機能 メール送信: SMTPを使用して、プレーンテキストとHTMLパートの両方を含むメールを送信します。 HTMLテンプレート:...

CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon CVE-2020-1472, extracted NTLM hashes, gained SYSTEM shell, and established a Meterpreter session. Executive Summary This exercis...

CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Patch update Microsoft has released a patch to...

UltraRealy_with_CVE-2019-1040

UltraRelay Updated by Lazaar Sami for the exploit CVE-2019-1040 UltraRelay is a tool for LLMNR poisoning and relaying NTLM credentials. It is based on Responder and impack. I have updated the original version https://github.com/5alt/ultrarelay for the exploit CVE-2019-1040. Dirk-jan Mollema has...