EntraPassTheCert

EntraPassTheCert EntraPassTheCert is a post-exploitation tool that allows attackers to request Entra ID's user P2P certificate and authenticate to a remote Entra joinned machine with it. root@kitploit: $ python3 entraptc.py -h usage: entraptc.py -h --debug requestp2pcert,smb,rdp,winrm,rpc...

PIVert

PIVert - PIV smart card emulator Introduction PIVert is a NIST SP 800-73 PIV smart card emulator. You can supply PIVert with a PFX file containing a certificate and corresponding private key and the tool will emulate the card to Windows as a genuine PIV card. The card can then be used for...

wireshark-rdp

Sample RDP Wireshark capture files Here is a collection of RDP decrypted capture files, showing various scenarios. RDP with NLA, Kerberos password authentication 1 rdp-nla-kerberos-auth1.pcapng Username: [email protected] Server: IT-HELP-TEST.ad.it-help.ninja Authentication: RDP NLA with...

Microsoft discontinues MD5 crypto for digital certificates to improve RDP Authentication

This week Microsoft has released several advisories to help their users update from weak crypto. Microsoft is beginning the process of discontinuing support for digital certificates that use the MD5 hashing algorithm and to improve the network-level authentication for the Remote Desktop Protocol...

Microsoft discontinues MD5 crypto for digital certificates to improve RDP Authentication

This week Microsoft has released several advisories to help their users update from weak crypto. Microsoft is beginning the process of discontinuing support for digital certificates that use the MD5 hashing algorithm and to improve the network-level authentication for the Remote Desktop Protocol...