Remote-Desktop-Caching-

Remote-Desktop-Caching- This tool allows one to recover old RDP mstsc session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG...

SharpLAPS

SharpLAPS ms-mcs-AdmPwd 속성은 일반 텍스트 LAPS 암호를 저장합니다. 이 실행 파일은 Cobalt Strike 세션 내에서 execute-assembly를 사용하여 실행되도록 만들어졌습니다. Active Directory에서 LAPS 암호를 검색합니다. 필요한 항목 다음 중 하나: ExtendedRight 또는 Generic All Rights 권한이 있는 계정 도메인 관리자 권한 사용법 / // / / / / | / / / \ / / / / / / / /| | / // /\ \ / / / / / //...

CVE-2024-37393

Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through blind LDAP injection attacks against the DESKTOP service exposed on the...

DonPAPI - Dumping DPAPI Credz Remotely

Dumping revelant information on compromised targets without AV detection DPAPI dumping Lots of credentials are protected by DPAPI. We aim at locating those "secured" credentials, and retreive them using : User password Domaine DPAPI BackupKey Local machine DPAPI Key protecting TaskScheduled blob...