NetNTLMtoSilverTicket

SpoolSample - NetNTLMv1 - NTLM - Silver Ticket 这项技术曾被其他人提及，但我尚未看到任何完整的资料。下面我们将逐步介绍如何获取 NetNTLMv1 挑战/响应认证，破解这些认证为 NTLM 哈希，并使用该 NTLM 哈希来签署 Kerberos Silver Ticket。 这适用于“LAN Manager 身份验证级别”设置为 2 或以下的网络。这是较旧、较大型 Windows 部署中相当常见的情况。在 Windows 10 / Server 2016 或更新版本上应该不起作用。 主要有 3 个步骤 通过 @tifkin Lee...

RemoteMonologue

RemoteMonologue RemoteMonologue 是一种 Windows 凭据收集技术，通过利用 Interactive User RunAs 键并借助 DCOM 强制 NTLM 认证，从而实现远程用户沦陷。 详细内容请阅读 X-Force Red 的 RemoteMonologue: Weaponizing DCOM for NTLM Authentication Coercions。 功能特性 🔹 通过 DCOM 进行认证强制（-dcom） 针对四个 DCOM...

oclHashcat v1.2 - GPGPU-based Multi-hash Cracker

oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...

[oclHashcat-plus v0.14] Worlds fastest md5crypt, phpass, mscash2 and WPA/WPA2 cracker

Features Worlds fastest md5crypt, phpass, mscash2 and WPA / WPA2 cracker Worlds first and only GPGPU based rule engine Free Multi-GPU up to 128 gpus Multi-Hash up to 15 million hashes Multi-OS Linux & Windows native binaries Multi-Platform OpenCL & CUDA support Multi-Algo see below Low resource...

[Hashcat v0.44] Advanced Password Recovery

Features Multi-Threaded Free Multi-Hash up to 24 million hashes Multi-OS Linux, Windows and OSX native binaries Multi-Algo MD4, MD5, SHA1, DCC, NTLM, MySQL, ... SSE2 accelerated All Attack-Modes except Brute-Force and Permutation can be extended by rules Very fast Rule-engine Rules compatible wit...