TaskHound

Windows Privileged Scheduled Task Discovery Tool for fun and profit. TaskHound hunts for Windows scheduled tasks that run with privileged accounts and stored credentials. It enumerates tasks over SMB, parses XMLs, and identifies high-value attack opportunities through BloodHound integration. For...

SMBSR

¡ALTO AHÍ! ¡Esta herramienta ya no se mantiene! Se ha decidido fusionar las funcionalidades de SMBSR y RSMBI. Por favor, consulta SMBAT SMBSR - ¿Qué es eso? Bueno, SMBSR es un script de Python que, dado un CIDR/IP/archivoIP/HOSTNAMEs, enumera todos los servicios SMB en escucha 445 entre los...

nullinux

nullinux Nullinux is an internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB. If no username and password are provided in the command line arguments, an anonymous login, or null session, is...

pipe_finder

Pipe Finder 1.0 Script automatizado para buscar en el protocolo SMB nombres de pipe disponibles Capturas de pantalla Requisitos metasploit-framework wget locate módulo pipeauditv2.rb https://github.com/peterpt/pipeauditorfb - Se instalará en la primera ejecución Requisitos de instalación apt-get...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...

OSCP

OSCP OSCP Study Guide Table of Contents Enumeration and Recon Web Enumeration Nikto scanning: nikto -h http://10.10.10.1 Directory busting with different tools: DIRB dirb http://10.10.10.1 Gobuster gobuster dir -u http://10.129.155.74:3000 -w...

TaskHound v1.2.0

Windows Privileged Scheduled Task Discovery Tool for fun and profit. TaskHound hunts for Windows scheduled tasks that run with privileged accounts and stored credentials. It enumerates tasks over SMB, parses XMLs, and identifies high-value attack opportunities through BloodHound integration. For...

wannacry-soc-lab

WannaCry SOC Investigation Lab Overview This project simu...

redteam-notebook

It is an offensive tool for network and web exploitation. The repository, redteam-notebook, contains a collection of commands, tips, and tricks for preparation and execution of red teaming activities, specifically for the OSCP exam. The primary vulnerability targeted is not explicitly stated, but...

Nmap NSE net: smb-enum-shares

Attempts to list shares using the 'srvsvc.NetShareEnumAll' MSRPC function and retrieve more information about them using 'srvsvc.NetShareGetInfo'. If access to those functions is denied, a list of common share names are checked. Finding open shares is useful to a penetration tester because there...

Nmap NSE net: smb-enum-groups

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...