144 matches found
SharpDPAPI
SharpDPAPI SharpDPAPI es un port a C de algunas funcionalidades de DPAPI del proyecto Mimikatz de @gentilkiwi. No se me ocurrió esta lógica, es simplemente un port desde Mimikatz para comprender mejor el proceso y operacionalizarlo para que se ajuste a nuestro flujo de trabajo. El subproyecto...
pypykatz
🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord pypykatz Mimikatz implementation in pure Python. At least a part of it : Runs on all OS...
ntfstool
ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...
LSTAR
LSTAR - Aggressor A plugin from initial access to domain takeover, enabling intranet traversal With the goal of simplifying CS right-click operations and facilitating integration, referencing a large number of post-exploitation plugins Restructured and enriched host credential acquisition,...
kerberoast
kerberoast Kerberoast is a series of tools for attacking MS Kerberos implementations. Below is a brief overview of what each tool does. Extract all accounts in use as SPN using built in MS tools root@kitploit: PS C:\ setspn -T medin -Q / Request Tickets One ticket: root@kitploit: PS C:\ Add-Type...
mimikatz
mimikatz mimikatz es una herramienta que creé para aprender C y hacer algunos experimentos con la seguridad de Windows. Ahora es bien conocida por extraer contraseñas en texto plano, hashes, códigos PIN y tickets de Kerberos de la memoria. mimikatz también puede realizar pass-the-hash,...
mimikatz
mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...
chalumeau
Chalumeau Chalumeau es una herramienta automatizada, extensible y personalizable para el volcado de credenciales basada en PowerShell y Python. Principales Características Escribe tus propios Payloads Ejecución en memoria Extraer lista de contraseñas Panel de control / Interfaz web Análisis de...
chalumeau
Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...
redsnarf
root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...
mimikatz-missing-manual
The Mimikatz Missing Manual The definitive guide to Windows Identity, Kerberos, and PKI Research. Originally developed as a private, high-end training curriculum for security conferences, this material is now being released to the public. Much of the technical depth and internal logic documented...
pypykatz
🚩 Patrocinadores Si te gusta este proyecto, considera comprar licencias de OctoPwn, nuestro conjunto completo de herramientas de pentesting que se ejecuta en tu navegador. Para notificaciones sobre nuevas versiones/lanzamientos y otra información, únete a nuestro Discord pypykatz Implementación d...
ranger
ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...
mimikatz-detector-busylight
Controlador detector de Mimikatz - Busylight Emulación de controlador USB HID con PID/VID 0x3bca/0x27bb de Plenom A/S Busylight Alpha, compatible con Mimikatz. Cuando se ejecuta mimikatz, de forma predeterminada se crea un subproceso que intenta localizar uno de los busylights compatibles. Se...
mimikatz-detector-busylight
Mimikatz detector driver - Busylight USB HID driver emulation with PID/VID 0x3bca/0x27bb of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is executed, a thread is spwaned by default that tries to locate one of the busylights that is supported. All HID devices are...
mscache
mscache a tool to manipulate dccdomain cached credentials in windows registry, based mainly on the work of mimikatz and impacket requirements python2 pycrypto passlib impacket example root@kitploit: python mscache.py --security security --system system dumping domain cached credentials reg query...
chlonium
Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...
CVE-2017-0213-
CVE-2017-0213 to get privilege Administator from CMD Vulnerable Product| Version| Update| Tested ---|---|---|--- Windows 10| | | √ Windows 10| 1511| | Windows 10| 1607| | Windows 10| 1703| | √ Windows 7| | SP1| √ Windows 8.1| | | Windows RT 8.1| | | Windows Server 2008| | SP2| Windows Server 2008...
PowerShellForPentesters
PowerShellForPentesters Playlist Link - https://youtube.com/playlist?list=PLJQHPJLjSQatUsJy3O4k-VQlllquDmDr PowerShell for Pentesters is a basic introduction to using PowerShell on internal penetration tests. This course is essentially the PowerShell module from my popular Movement, Pivoting, and...