icebreaker

icebreaker 打破那个可爱的Active Directory环境的冰。当你孤独寒冷地凝视着一个Active Directory派对，却连一个AD凭据都没有，无法加入狂欢时，这个工具就是为你准备的。 它依次自动化执行5种针对Active Directory的内部网络攻击，为你交付明文凭据。使用--auto选项，可在获得立足点后自动获取域管理员权限。 概要详情 以下攻击按顺序执行，直至第四和第五种攻击（它们并行且无限期运行）。 反向暴力破解 自动获取用户名列表，并用两个最常见的AD密码（超过两次尝试可能触发账户锁定策略）逐一测试 上传到网络共享...

southernchronicles.icebreaker.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1165567 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Icebreaker: Chip Away at Active Directory Passwords, Automatically

To break the ice with Active Directory and shorten the cycles penetration testers spend on cracking passwords, I developed Icebreaker, a tool that automates network attacks against Active Directory and provides plaintext credentials. Icebreaker performs five network attacks in order...