CVE-2020-1472

CVE-2020-1472 POC Requiere la última versión de impacket desde GitHub con las estructuras netlogon añadidas. Ten en cuenta que, por defecto, esto cambia la contraseña de la cuenta del controlador de dominio. Sí, esto te permite hacer DCSync, pero también rompe la comunicación con otros...

hacks

Hacks Hacky one-off scripts, tests etc...

domain_generation_algorithms

Domain Generation Algorithms Domain Generation Algorithms DGAs of Malware reimplemented in Python. Overview banjori aka MultiBanker 2, BankPatcher Links http://johannesbader.ch/2015/02/the-dga-of-banjori/ Example Domains earnestnessbiophysicalohax.com kwtoestnessbiophysicalohax.com...

domain-locker

Domain Locker The Central Hub for all your Domain Names 🌐domain-locker.com Contents About Screenshot Features Live Demo Get Started Domain-Locker.com Self-Hosting Developing App Setup Architecture Contributing Attributions License About The aim of Domain Locker, is to give you complete visibility...

ADSearch

ADSearch Una herramienta escrita para el comando execute-assembly de cobalt-strike que permite realizar consultas más eficientes de AD. Características principales Listar todos los administradores de dominio Búsqueda LDAP personalizada Conectarse a servidores LDAPS Generar datos JSON de instancia...

CVE-2014-0160-Scanner

CVE-2014-0160-Scanner This is a simple php command line script to check an array of domains for the CVE-2014-0160 vuln to run: php index.php Credits: It uses the service provided by http://filippo.io/Heartbleed/...

CVE-2020-5148

CVE-2020-5148 Forced Authentication in the SonicWall UTM SSO Agent The SonicWall SSO Agent identifies the user behind a given IP address by probing that workstation with NetAPI the default or WMI. It does not validate the workstation before initiating the NTLM authentication, and it continues...

dnsmorph

DNSMORPH es un motor de permutación de nombres de dominio, inspirado en dnstwist. Está escrito en Go, lo que lo convierte en una herramienta compacta y muy rápida. Maneja de manera robusta cualquier dominio o subdominio proporcionado y ofrece varias opciones de configuración para ajustar las...

spraykatz

Spraykatz Spray love around the world Index...

mscache

mscache una herramienta para manipular dcc credenciales cacheadas de dominio en el registro de Windows, basada principalmente en el trabajo de mimikatz e impacket requisitos python2 pycrypto passlib impacket ejemplo root@kitploit: python mscache.py --security security --system system dumping doma...

pyhunter

pyhunter Herramienta para buscar posibles correos electrónicos indexados a través de la API de Hunter.io https://hunter.io Instalación Puedes descargar la última versión de pyhunter clonando el repositorio de GitHub: root@kitploit: git clone https://github.com/n4xh4ck5/pyhunter.git Instala las...

Active-Directory-Exploitation-Cheat-Sheet

Hoja de referencia de explotación de Active Directory Esta hoja de referencia contiene métodos comunes de enumeración y ataque para Active Directory de Windows. ℹ️ Este repositorio fue creado por Nikos Katsiopis y Nikos Vourdas. Esta hoja de referencia está inspirada en el repositorio...

CVE-2021-1675

CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Installation Before running the exploit you need t...

xsubfind3r

xsubfind3r xsubfind3r is a command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicl...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation root@kitploit: bundle install Current...

Vmware-ESXI

CVE-2024-37085 unauthenticated shell upload to full administrator on domain-joined esxi hypervisors. Download ESXIVORTEX Details: an authentication bypass which leads to shell upload in context of vpxuser leading to full administrative permission on domain-joined ESXI hypervisors. in order to...

Find-AdminAccess

FindAdminAccess A C utility that enumerates domain computers and tests administrative access to them, including connectivity checks, admin privileges verification, and C$ share writability testing. Features Enumerate all computers in an Active Directory domain Test network connectivity Verify...

pre2k

root@kitploit: /'\ /\ \ /\ /\ \ \ /'\ /\ '/'/'\ //// /\ \ , \ \ \L\ \ \ //\ //\ // /\ \ \ \\ \ \ ,/\ \\ \// // \ \ \ \ \ / // // // //// \ \ v3.0 // @unsignedsh0rt @Tw1sm Pre2k Pre2k is a tool to query for the existence of pre-windows 2000 computer objects which can be...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

Creds

Creds Some usefull Scripts and Executables for Pentest & Forensics Most Scripts/Executables are Windows / Domain specific. Legal disclaimer: Usage of theese Scripts/Executables for attacking targets without prior mutual consent is illegal. It's the end user's responsibility to obey all applicable...