lsassy

lsassy Python-Werkzeug zum entfernten Extrahieren von Anmeldeinformationen auf einer Gruppe von Hosts. Dieser Blogbeitrag erklärt, wie es funktioniert. Dieses Tool verwendet das impacket-Projekt, um die notwendigen Bytes aus einem lsass-Dump entfernt auszulesen, und pypykatz, um...

dcpwn

dcpwn uno script dipendente da impacket che sfrutta CVE-2019-1040, con codice in parte preso in prestito da quei ricercatori di sicurezza che vorrei ringraziare. dando un'occhiata più da vicino scoprirai che la tecnica stessa per utilizzare la vulnerabilità è leggermente diversa da quanto...

DigiPwn

DigiPwn La scheda di sviluppo USB Digispark KickStarter ATtiny85 è simile ad Arduino, ma più economica e più piccola ovviamente un po' meno potente. Con una vasta gamma di shield per estenderne le funzionalità e la possibilità di utilizzare il familiare IDE Arduino, questa scheda è un ottimo modo...

CVE-2020-1472

ZeroLogon-Testskript Ein Python-Skript, das die Impacket-Bibliothek verwendet, um die Schwachstelle für den Zerologon-Exploit CVE-2020-1472 zu testen. Es versucht, den Netlogon-Authentifizierungs-Bypass durchzuführen. Das Skript wird sofort beendet, wenn der Bypass erfolgreich durchgeführt wurde,...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472 – Python-Implementierung der Zero-Logon-Sicherheitslücke Beschreibung Ein Python-Skript, das die Impacket-Bibliothek verwendet, um auf CVE-2020-1472 – die Zerologon-Sicherheitslücke – zu testen Credits an Secura Research. Der Fehler liegt im Netlogon Remote Protocol, d...

Outpacket

📦 Outpacket क्या आप impacket से तंग आ चुके हैं? यह चीटशीट सामान्य impacket वर्कफ़्लो को उनके आधुनिक विकल्पों से मैप करती है अनुक्रमणिका प्रमाणीकरण त्वरित संदर्भ 1. रिमोट निष्पादन WMI निष्पादन · wmiexec.py DCOM निष्पादन · dcomexec.py सेवा-आधारित निष्पादन · smbexec.py · psexec.py अनुसूचित कार्य...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

UltraRealy_with_CVE-2019-1040

UltraRelay aggiornato da Lazaar Sami per l'exploit CVE-2019-1040 UltraRelay è uno strumento per l'avvelenamento LLMNR e il relay delle credenziali NTLM. Si basa su Responder e impack. Ho aggiornato la versione originale https://github.com/5alt/ultrarelay per l'exploit CVE-2019-1040. Dirk-jan...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

ZeroLogon-Exploit

ZeroLogon - शोषण और उदाहरण परीक्षण PoC को Secura से संशोधित किया गया, CVE-2020-1472, मशीन के पासवर्ड को शून्य करने के लिए। मशीन पर पासवर्ड बदलने के लिए Microsoft के NetrServerPasswordSet2 फ़ंक्शन का उपयोग किया जाता है। यह शोषण Impacket के nrpc.py मॉड्यूल का लाभ उठाता है NetrServerPasswordSet2 को...

PrintNightmare-CVE-2021-1675-CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Implementazione Impacket del PoC PrintNightmare creato originariamente da Zhiniang Peng @edwardzpeng e Xuefeng Li @lxf02942370 Testato su un Domain Controller 2019 completamente aggiornato Esegui DLL dannose in remoto o localmente Aggiornamento della patch Microsoft...

NegoExRelay

Negoexrelayx – Negoex-Relay-Werkzeug Toolkit zum Missbrauchen von Kerberos PKU2U und NegoEx. Erfordert impacket. Es wird empfohlen, impacket direkt von Git zu installieren, um die neueste Version zu erhalten. negoexrelayx.py Dieses Tool ermöglicht es Ihnen, NegoEx-Authentifizierung mit PKU2U an...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

ZerologonWithImpacket-CVE2020-1472

Combinazione di Exploit Zerologon e Impacket CVE-2020-1472 Questo repository contiene un'implementazione aggiornata 2024 dell'exploit Zerologon combinato con gli strumenti Impacket per sfruttare la CVE-2020-1472 Zerologon. Questo exploit prende di mira ambienti Windows Server per manipolare le...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

ticket_converter

Dieses Skript wird nicht mehr unterstützt Verwenden Sie das impacket-Beispiel ticketConverter.py. ticketconverter Ein kleines Tool zum Konvertieren von ccache-Tickets in kirbi KRB-CRED und umgekehrt, basierend auf impacket. Als Eingabe müssen Sie eine ccache- oder kirbi-Datei angeben. Das Skript...

MoreImpacketExamples

MoreImpacketExamples Este repositório contém alguns scripts curtos em Python criados usando a biblioteca Impacket. O objetivo principal deste projeto é ajudar a mim e a outras pessoas que desejam fazer a transição de usar os exemplos fornecidos do impacket para modificar/criar seus próprios...

orpheus

Orpheus Orpheus ist ein Wrapper für eine modifizierte Version von Impackets GetUserSPNs.py und kerberosv5.py, die die KDC-Optionen Ticket-Optionen und den Verschlüsselungstyp für Kerberoasting verändert. Hinweis: Orpheus ist nach dem griechischen Gott benannt, der es schaffte, an Cerberus dem...