NetNTLMtoSilverTicket

SpoolSample - NetNTLMv1 - NTLM - Silver Ticket Esta técnica ha sido mencionada por otros, pero no he visto nada cohesionado por ahí. A continuación, recorreremos los pasos para obtener una autenticación NetNTLMv1 Challenge/Response, descifrar esas respuestas a hashes NTLM y usar ese hash NTLM par...

vulnerable-AD

Vulnerable-AD Crea un directorio activo vulnerable que te permita probar la mayoría de los ataques a directorio activo en un laboratorio local Características principales Ataques aleatorios Cobertura completa de los ataques mencionados Necesitas ejecutar el script en el DC con Active Directory...

GhostTask

Ghost Scheduled Task Inspirado por la investigación de WithSecure sobre manipulación de tareas programadas, explicaron la viabilidad de crear una tarea programada únicamente mediante manipulación de claves de registro. Este enfoque puede eludir la generación de registros de eventos de creación de...

blackhat-usa-2022-demos

blackhat-usa-2022-demos Demos for the Blackhat USA 2022 talk "Taking Kerberos to the Next Level". This is the slides and demos for James Forshaw @tiraniddo and Nick Landers @monoxgas presentation. The demos are as follows: demo1.ps1 - Silver ticket with password. demo2.ps1 - Silver ticket U2U...

Kerberos Silver/Golden/Diamond/Sapphire Ticket Forging

This module forges a Kerberos ticket. Four different techniques can be used: - Silver ticket: Using a service account hash, craft a ticket impersonating any user and privileges to that account. - Golden ticket: Using the krbtgt hash, craft a ticket impersonating any user and privileges. - Diamond...

How to Mitigate Microsoft Windows 10, 11 SeriousSAM Vulnerability

Microsoft Windows 10 and Windows 11 users are at risk of a new unpatched vulnerability that was recently disclosed publicly. As we reported last week, the vulnerability — SeriousSAM — allows attackers with low-level permissions to access Windows system files to perform a Pass-the-Hash and...

MS14-068-domain privilege escalation vulnerability summary-vulnerability warning-the black bar safety net

0x01 vulnerability of origin Said to ms14-068,have to say the silver ticket, that is, the cheque in. Cheque is a piece of tgs, that is, a service Ticket. The service ticket is the client is sent directly to the server and request the service resource. If the server is not the domain controller dc...