WinPwn

Sponsored by WinPwn In many past internal penetration tests I often had problems with the existing Powershell Recon / Exploitation scripts due to missing proxy support. I also often ran the same scripts one after the other to get information about the current system and/or the domain. To automate...

PeekABoo

PeekABoo PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. The tool only works if WinRM is enabled. Since Windows Server 2012 WinRM is enabled by default on all Window...

relay_bible

Relay Bible — 내부 침투 테스트 릴레이 가이드 승인된 내부 침투 테스트 중 NTLM 릴레이 공격을 위한 종합 참조 자료입니다. 인증 기초, 강제Coercion 기법, 프로토콜별 릴레이 대상, 도구, 고급 체이닝, 방어 완화 조치를 다룹니다. 사전 요구 사항 Linux 공격 호스트Kali, Parrot 또는 유사 배포판 Python 3.10+ 및 Impacket 설치 대상 환경에 대한 네트워크 액세스승인된 계약 Active Directory 및 Windows 네트워킹에 대한 기본 이해 목차 1. 기초 NTLM 인증 및...

HiveJack - This Tool Can Be Used During Internal Penetration Testing To Dump Windows Credentials From An Already-Compromised Host

This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM, SECURITY and SAM registry hives and once copied to the attacker machines provides an option to delete these files to clear the trace. Often, this i...

PeekABoo - Tool To Enable Remote Desktop On The Targeted Machine

PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. The tool only works if WinRM is enabled. Since Windows Server 2012 WinRM is enabled by default on all Windows server...

Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities (1)

Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities 1 Abysssec Inc Public Advisory Title : Portili Personal and Team Wiki Multiple Remote Vulnerabilities Affected Version : Portili Personal and Team Wik = 1.14 Vendor Site : www.Portili.com Discovery : www.Abysssec.com Vendor Contact :...