mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. .. mimikatz 2....

Prox-Ez

Prox-Ez: La navaja suiza de la autenticación HTTP Este proxy HTTP gestiona todas las autenticaciones HTTP en tu nombre. Es compatible con NTLM EPA enlace de canal y enlace de servicio, kerberos, pass-the-hash, overpass-the-hash pass-the-key y pass-the-ticket TGT y TGS. Artículos relacionados:...

noPac

noPac 这个项目的由来是出于对 noPac 的原理学习, 在 cube0x0 的项目基础上进行了一些更改. 源码中添加了个人的理解注释. 删除了 Scan 功能, 个人觉得 Scan 功能用处比较鸡肋. 增加了 MachineAccountQuota 值的判断, 如果为 0 则退出程序. 优化了添加计算机帐户时的判断处理. 增加了 TGT 的输出. 漏洞的分析文章可以查看我的博客文章: noPac 分析 利用条件 noPac 是 CVE-2021-42278 sAMAccountName spoofing & CVE-2021-42287 deceiving the KDC...

Kerbeus-BOF

Kerbeus-BOF 用于 Kerberos 滥用的 Beacon 对象文件。这是 Rubeus 项目一些重要功能的实现，使用 C 语言编写。该项目集成了 C2 框架 Cobalt Strike、Havoc、AdaptixC2 和 Outflank C2。 票据请求与续订 asktgt asktgt 操作将为指定的用户和加密密钥（/rc4 或 /aes256）构建原始的 AS-REQ（TGT 请求）流量。也可以使用 /password 标志代替哈希 - 在这种情况下，/enctype:X 将默认为 RC4。如果未指定 /domain，则提取计算机的当前域；如果未指定...

AutoPtT

AutoPtT AutoPtT 枚举 Kerberos 票证并以交互式或逐步方式执行传递票证 PtT 攻击。它是此攻击的独立替代方案，替代 Rubeus 或 Mimikatz，使用 C、C++、Crystal、Python 和 Rust 实现。 你可以使用以下选项： auto - 自动化传递票证攻击 sessions - 列出登录会话。类似于运行 klist sessions klist - 列出当前会话中的票证。类似于运行 klist tickets - 列出所有会话中的票证（不仅仅是 TGT）。类似于运行 Rubeus.exe dump export - 根据 LogonId...

No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations

No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations By Maulik Maheta and Henry Bernabe · August 27, 2026 Executive Summary Active Directory misconfigurations are vulnerabilities that attackers can exploit before defenders notice them. This blog exposes a stealthier...

Active Directory Attacks Demystified: Pass-the-Hash (PtH), Pass-the-Ticket (PtT), and Beyond

Key Takeaways Active Directory attacks are identified as a significant threat in enterprise environments, with 74% of breaches involving compromised identities according to the Verizon DBIR 2025. Pass-the-Hash PtHattacks facilitate lateral movement by allowing the reuse of stolen NTLM hashes...

Metasploit Weekly Wrap-Up 08/02/2024

Metasploit goes to Hacker Summer Camp Next week, Metasploit will have demos at both Black Hat and DEF CON where the latest functionality from this year will be presented. The Black Hat demo will be on Thursday the 8th from 10:10 to 11:25 and the DEF CON demo will be on Saturday the 10th from 12:0...

Autobloody - Tool To Automatically Exploit Active Directory Privilege Escalation Paths Shown By BloodHound

autobloody is a tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound. Description This tool automates the AD privesc between two AD objects, the source the one we own and the target the one we want if a privesc path exists in BloodHound database. The...

Abusing RDP’s Remote Credential Guard with Rubeus PTT

TL;DR Microsoft’s Remote Credential Guard RCG for RDP protects creds if an RDP server is compromised. It leaves little scope for password or NTLM credential dumping when a user connects to the server. It does however introduce workstation attack vectors. Abusing a user’s Kerberos token allows...

Mimikatz v2.2.0 - A Post-Exploitation Tool to Extract Plaintexts Passwords, Hash, PIN Code from Memory

mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. But that's not all!...

Abusing Windows Security: mimikatz

mimikatz is well known tool for extraction of plaintexts passwords, hashes, PIN codes and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. A lot of times after the initial exploitation phase attackers may want to get a firmer foothold...

Microsoft Windows Kerberos - 'Pass The Ticket' Replay Security Bypass

source: https://www.securityfocus.com/bid/42435/info The Microsoft Windows implementation of Kerberos is prone to a security-bypass vulnerability. Successful exploits may allow attackers to gain unauthorized access to affected computers through replay attacks...