AutoPtT

AutoPtT AutoPtT केर्बरोस टिकटों की गणना करता है और पास-द-टिकट PtT हमलों को इंटरैक्टिव या चरण-दर-चरण करता है। यह इस हमले के लिए Rubeus या Mimikatz का एक स्वतंत्र विकल्प है, जिसे C, C++, Crystal, Python और Rust में लागू किया गया है। आप निम्नलिखित विकल्पों का उपयोग कर सकते हैं: auto - स्वचालित...

Kerbeus-BOF

Kerbeus-BOF ملفات كائنات المنارة Beacon Object Files لاستغلال Kerberos. هذا تنفيذ لبعض الميزات المهمة لمشروع Rubeus، مكتوب بلغة C. المشروع يدعم التكامل مع أطر عمل C2: Cobalt Strike و Havoc و AdaptixC2 و Outflank C2. طلبات التذاكر والتجديدات asktgt يقوم إجراء asktgt ببناء حركة مرور AS-REQ طلب TGT...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...

noPac

noPac यह परियोजना noPac के सिद्धांत सीखने के लिए शुरू की गई थी, cube0x0 की परियोजना के आधार पर कुछ बदलाव किए गए। स्रोत कोड में व्यक्तिगत समझ की टिप्पणियाँ जोड़ी गईं। Scan फीचर हटा दिया गया, मेरी राय में Scan फीचर बहुत कम काम का है। MachineAccountQuota मान की जाँच जोड़ी गई, यदि यह 0 है तो प्रोग्रा...

Prox-Ez

Prox-Ez: سكين الجيش السويسري لمصادقة HTTP يتعامل وكيل HTTP هذا مع جميع مصادقات HTTP نيابة عنك. وهو يدعم NTLM EPA ربط القناة وربط الخدمة، وKerberos، وpass-the-hash، وoverpass-the-hash pass-the-key، وpass-the-ticket TGT وTGS. مقالات ذات صلة: تشريح NTLM EPA بمحبة وبناء وكيل MitM دراسة حول مصادقة HTT...

Active Directory Attacks Demystified: Pass-the-Hash (PtH), Pass-the-Ticket (PtT), and Beyond

Key Takeaways Active Directory attacks are identified as a significant threat in enterprise environments, with 74% of breaches involving compromised identities according to the Verizon DBIR 2025. Pass-the-Hash PtHattacks facilitate lateral movement by allowing the reuse of stolen NTLM hashes...

Metasploit Weekly Wrap-Up 08/02/2024

Metasploit goes to Hacker Summer Camp Next week, Metasploit will have demos at both Black Hat and DEF CON where the latest functionality from this year will be presented. The Black Hat demo will be on Thursday the 8th from 10:10 to 11:25 and the DEF CON demo will be on Saturday the 10th from 12:0...

Autobloody - Tool To Automatically Exploit Active Directory Privilege Escalation Paths Shown By BloodHound

autobloody is a tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound. Description This tool automates the AD privesc between two AD objects, the source the one we own and the target the one we want if a privesc path exists in BloodHound database. The...

Abusing RDP’s Remote Credential Guard with Rubeus PTT

TL;DR Microsoft’s Remote Credential Guard RCG for RDP protects creds if an RDP server is compromised. It leaves little scope for password or NTLM credential dumping when a user connects to the server. It does however introduce workstation attack vectors. Abusing a user’s Kerberos token allows...

Mimikatz v2.2.0 - A Post-Exploitation Tool to Extract Plaintexts Passwords, Hash, PIN Code from Memory

mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. But that's not all!...

Abusing Windows Security: mimikatz

mimikatz is well known tool for extraction of plaintexts passwords, hashes, PIN codes and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. A lot of times after the initial exploitation phase attackers may want to get a firmer foothold...

Microsoft Windows Kerberos - 'Pass The Ticket' Replay Security Bypass

source: https://www.securityfocus.com/bid/42435/info The Microsoft Windows implementation of Kerberos is prone to a security-bypass vulnerability. Successful exploits may allow attackers to gain unauthorized access to affected computers through replay attacks...