14 matches found
linWinPwn
linWinPwn - Active Directory 渗透测试的瑞士军刀（Linux 版） 描述 linWinPwn 是一个 bash 脚本，它封装了大量 Active Directory...
SilentHound
SilentHound Enumera silenciosamente un dominio de Active Directory mediante el análisis LDAP de usuarios, administradores, grupos, etc. Creado por Nick Swink de Layer 8 Security. Instalación Usando pipenv método recomendado root@kitploit: python3 -m pip install --user pipenv git clone...
jackdaw
jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...
ADReaper
ADReaper ADReaper 是一个用 Golang 编写的工具，能够在几秒钟内通过 LDAP 查询枚举 Active Directory 环境。 安装 你可以从 最新发布 下载适用于 Windows/Linux 的预编译可执行二进制文件。 从源码安装 要从源码构建，克隆仓库并使用 GO 构建： root@kitploit: $ git clone https://github.com/AidenPearce369/ADReaper $ cd ADReaper/ $ go build 使用方法 ADReaper 通过多种命令执行枚举，这些命令根据各自用途执行 LDAP 查询。...
msLDAPDump
msLDAPDump 基于Python3的LDAP枚举工具 msLDAPDump 通过将 Python 的 ldap3 库封装成易用的接口，简化了域环境中的 LDAP 枚举。与我的大多数工具一样，此工具在 Windows 上效果最佳。如果在 Unix 上使用，该工具目前无法解析非通过 eth0 可访问的主机名。 匿名绑定 用户可以通过该工具匿名绑定到 LDAP，并导出有关 LDAP 的基本信息，包括域命名上下文、域控制器主机名等。 凭据绑定 用户可以使用有效的用户账户凭据或有效的 NTLM 哈希绑定到 LDAP。使用凭据将获得与匿名绑定请求相同的信息，并检查以下内容： 扫描开放端口 38...
ad-ldap-enum
ad-ldap-enum ad-ldap-enum es un script de Python desarrollado para recopilar usuarios/equipos y su pertenencia a grupos de Active Directory. En entornos grandes de Active Directory, herramientas como NBTEnum no eran lo suficientemente rápidas. Al ejecutar consultas LDAP contra un controlador de...
ADCollector
ADCollector ADCollector es una herramienta ligera que enumera el entorno de Active Directory para identificar posibles vectores de ataque. Te dará una comprensión básica de la configuración/despliegue del entorno como punto de partida. Notas: ADCollector no es una alternativa al potente PowerView...
msLDAPDump - LDAP Enumeration Tool
msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the lpap3 library from Python in an easy-to-use interface. Like most of my tools, this one works best on Windows. If using Unix, the tool will not resolve hostnames that are not accessible via eth0 currently. Binding...
Qualys Threat Research Thursday
Welcome to the second edition of the Qualys Research Team’s “Threat Research Thursday”, where we collect and curate notable new tools, techniques, procedures, threat intelligence, cybersecurity news, malware attacks, and more. Feedback on our first edition, Introducing Qualys Threat Research...
CVE-2022-31088
LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 the user name field at login could be used to enumerate LDAP data. This is only the case for LDAP search configuration. This issue has been fixed ...
xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapSearchEnumeration
A flaw was found in xstream, a simple library used to serialize objects to XML and back again. This flaw allows a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream. The highest threat from this vulnerability is to confidentiality,...
Kerberoast - Kerberoast Attack -Pure Python-
Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are the following : +://:@/?= : +://:@/?= Steps -with SSPI-: kerberoast auto Steps -SSPI not...
