mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...

kerberoast

kerberoast Kerberoast is a series of tools for attacking MS Kerberos implementations. Below is a brief overview of what each tool does. Extract all accounts in use as SPN using built in MS tools root@kitploit: PS C:\ setspn -T medin -Q / Request Tickets One ticket: root@kitploit: PS C:\ Add-Type...

ntfstool

ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...

mimikatz-missing-manual

The Mimikatz Missing Manual The definitive guide to Windows Identity, Kerberos, and PKI Research. Originally developed as a private, high-end training curriculum for security conferences, this material is now being released to the public. Much of the technical depth and internal logic documented...

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

mscache

mscache a tool to manipulate dccdomain cached credentials in windows registry, based mainly on the work of mimikatz and impacket requirements python2 pycrypto passlib impacket example root@kitploit: python mscache.py --security security --system system dumping domain cached credentials reg query...

chlonium

Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...

pypykatz

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord pypykatz Mimikatz implementation in pure Python. At least a part of it : Runs on all OS...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

LSTAR

LSTAR - Aggressor A plugin from initial access to domain takeover, enabling intranet traversal With the goal of simplifying CS right-click operations and facilitating integration, referencing a large number of post-exploitation plugins Restructured and enriched host credential acquisition,...

chalumeau

Chalumeau Chalumeauは、PowerShellとPythonをベースにした自動化、拡張可能、カスタマイズ可能な認証情報ダンプツールです。 主な機能 独自のペイロードを作成 メモリ上での実行 パスワードリストの抽出 ダッシュボードレポート / Webインターフェース Mimikatzの解析 チケットのダンプ スクリーンショット 既知の問題 Mimikatzのdcsync解析（修正作業中） アンチウイルスやEDRの回避：ペイロードを維持する必要があります TODO 暗号化通信 自動化されたラテラルムーブメント 自動化されたパスワードスプレー攻撃 自動化されたハッシュクラッキン...

PowerShellForPentesters

PowerShellForPentesters Playlist Link - https://youtube.com/playlist?list=PLJQHPJLjSQatUsJy3O4k-VQlllquDmDr PowerShell for Pentesters is a basic introduction to using PowerShell on internal penetration tests. This course is essentially the PowerShell module from my popular Movement, Pivoting, and...

SharpDPAPI

SharpDPAPI SharpDPAPI is a C port of some DPAPI functionality from @gentilkiwi's Mimikatz project. I did not come up with this logic, it is simply a port from Mimikatz in order to better understand the process and operationalize it to fit our workflow. The SharpChrome subproject is an adaptation ...

CVE-2017-0213-

CVE-2017-0213 to get privilege Administator from CMD Vulnerable Product| Version| Update| Tested ---|---|---|--- Windows 10| | | √ Windows 10| 1511| | Windows 10| 1607| | Windows 10| 1703| | √ Windows 7| | SP1| √ Windows 8.1| | | Windows RT 8.1| | | Windows Server 2008| | SP2| Windows Server 2008...

pypykatz

🚩 スポンサー このプロジェクトが気に入ったら、ブラウザで動作するフルペンテストスイート OctoPwn のライセンス購入をご検討ください。 新しいビルドやリリースの通知やその他の情報については、Discord にご参加ください。 pypykatz 純粋なPythonで実装されたMimikatz。少なくともその一部は : python=3.6 をサポートするすべてのOSで動作します。 🚩 ブラウザで動作 このプロジェクトは、多くの他のペンテスターツールとともに、OctoPwnの力でブラウザ上で動作します！ コミュニティ版は OctoPwn - Live でご確認ください。 WIKI...

mimikatz

mimikatz mimikatz は、C を学び、Windows セキュリティに関する実験を行うために私が作成したツールです。 現在では、メモリから平文パスワード、ハッシュ、PIN コード、Kerberos チケットを抽出することでよく知られています。mimikatz は、パス・ザ・ハッシュ、パス・ザ・チケット、または ゴールデンチケット の作成も実行できます。 root@kitploit: .. mimikatz 2.0 alpha x86 release "Kiwi en C" Apr 6 2014 22:02:03 . ^ . / \ / \ / Benjamin DELPY...

mimikatz-detector-busylight

Mimikatz 检测器驱动程序 - Busylight USB HID 驱动程序模拟，使用 Plenom A/S Busylight Alpha 的 PID/VID（0x3bca/0x27bb），该设备受 Mimikatz 支持。 当 mimikatz 执行时，默认会生成一个线程，尝试定位受支持的 busylight 之一。系统会枚举所有 HID 设备，如果 PID/VID 匹配，则会发送数据包以不同颜色闪烁 busylight。 mimikatz 会向该设备发送三种类型的数据包： keepalive - 大约每隔一秒左右发送一次 start - 仅在找到设备时发送 stop - 当...

ABC

ABC CVE-2017-11882 Invoke-Mimikatz https://goo.gl/urb92R Calc.exe https://goo.gl/qTqqE4...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...