mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...

Prox-Ez

Prox-Ez: HTTP認証のスイスアーミーナイフ このHTTPプロキシは、すべてのHTTP認証を代行処理します。 NTLM EPA（チャネルバインディングおよびサービスバインディング）、kerberos、pass-the-hash、overpass-the-hash（pass-the-key）、pass-the-ticket（TGTおよびTGS）に対応しています。 関連記事: Dissecting NTLM EPA with love & building a MitM proxy A study on Windows HTTP authentication Part II インスト...

Kerbeus-BOF

Kerbeus-BOF Kerberos 남용을 위한 Beacon Object Files입니다. 이는 Rubeus 프로젝트의 중요한 기능 중 일부를 C로 구현한 것입니다. 이 프로젝트는 C2 프레임워크인 Cobalt Strike, Havoc, AdaptixC2 및 Outflank C2와의 통합을 지원합니다. 티켓 요청 및 갱신 asktgt asktgt 액션은 지정된 사용자와 암호화 키/rc4 또는 /aes256를 사용하여 원시 AS-REQTGT 요청 트래픽을 구성합니다. 해시 대신 /password 플래그를 사용할 수도 있습니다....

AutoPtT

AutoPtT AutoPtT는 Kerberos 티켓을 열거하고 대화식 또는 단계적으로 Pass-the-Ticket PtT 공격을 수행합니다. 이 공격에 대해 Rubeus 또는 Mimikatz의 독립형 대안으로, C, C++, Crystal, Python 및 Rust로 구현되었습니다. 다음 옵션을 사용할 수 있습니다: auto - 자동 Pass-the-Ticket 공격 sessions - 로그온 세션 목록 표시. klist sessions 실행과 유사 klist - 현재 세션의 티켓 목록 표시. klist 실행과 유사...

noPac

noPac 이 프로젝트는 noPac의 원리를 학습하기 위해 시작되었으며, cube0x0의 프로젝트를 기반으로 몇 가지 변경을 가했습니다. 소스 코드에 개인적인 이해를 위한 주석을 추가했습니다. Scan 기능을 제거했습니다. 개인적으로 Scan 기능은 쓸모가 없다고 생각합니다. MachineAccountQuota 값을 확인하여 0이면 프로그램을 종료합니다. 컴퓨터 계정 추가 시의 판단 처리를 최적화했습니다. TGT 출력을 추가했습니다. 취약점 분석 글은 제 블로그 게시물에서 확인할 수 있습니다: noPac 분석 이용 조건...

No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations

No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations By Maulik Maheta and Henry Bernabe · August 27, 2026 Executive Summary Active Directory misconfigurations are vulnerabilities that attackers can exploit before defenders notice them. This blog exposes a stealthier...

Active Directory Attacks Demystified: Pass-the-Hash (PtH), Pass-the-Ticket (PtT), and Beyond

Key Takeaways Active Directory attacks are identified as a significant threat in enterprise environments, with 74% of breaches involving compromised identities according to the Verizon DBIR 2025. Pass-the-Hash PtHattacks facilitate lateral movement by allowing the reuse of stolen NTLM hashes...

Metasploit Weekly Wrap-Up 08/02/2024

Metasploit goes to Hacker Summer Camp Next week, Metasploit will have demos at both Black Hat and DEF CON where the latest functionality from this year will be presented. The Black Hat demo will be on Thursday the 8th from 10:10 to 11:25 and the DEF CON demo will be on Saturday the 10th from 12:0...

Autobloody - Tool To Automatically Exploit Active Directory Privilege Escalation Paths Shown By BloodHound

autobloody is a tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound. Description This tool automates the AD privesc between two AD objects, the source the one we own and the target the one we want if a privesc path exists in BloodHound database. The...

Abusing RDP’s Remote Credential Guard with Rubeus PTT

TL;DR Microsoft’s Remote Credential Guard RCG for RDP protects creds if an RDP server is compromised. It leaves little scope for password or NTLM credential dumping when a user connects to the server. It does however introduce workstation attack vectors. Abusing a user’s Kerberos token allows...

Mimikatz v2.2.0 - A Post-Exploitation Tool to Extract Plaintexts Passwords, Hash, PIN Code from Memory

mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. But that's not all!...

Abusing Windows Security: mimikatz

mimikatz is well known tool for extraction of plaintexts passwords, hashes, PIN codes and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. A lot of times after the initial exploitation phase attackers may want to get a firmer foothold...

Microsoft Windows Kerberos - 'Pass The Ticket' Replay Security Bypass

source: https://www.securityfocus.com/bid/42435/info The Microsoft Windows implementation of Kerberos is prone to a security-bypass vulnerability. Successful exploits may allow attackers to gain unauthorized access to affected computers through replay attacks...