vulnerable-AD

Vulnerable-AD Create a vulnerable active directory that's allowing you to test most of active directory attacks in local lab Main Features Randomize Attacks Full Coverage of the mentioned attacks you need run the script in DC with Active Directory installed Some of attacks require client...

Silver

This repository does not have a README...

ntlmv1-multi

NTLMv1 Multi Tool This tool reverses NTLMv1 hashes to NTLM, or more specifically it formats NTLMv1 challenge responses into a format that can be cracked with hashcat mode 14000 CT3 calculation If you specify --ct3 it will calculate the the final 4 digits of the NTLM for you, if you specify --json...

blackhat-usa-2022-demos

blackhat-usa-2022-demos Demos for the Blackhat USA 2022 talk "Taking Kerberos to the Next Level". This is the slides and demos for James Forshaw @tiraniddo and Nick Landers @monoxgas presentation. The demos are as follows: demo1.ps1 - Silver ticket with password. demo2.ps1 - Silver ticket U2U...

GhostTask

Ghost Scheduled Task Inspired by WithSecure's research on Scheduled Task Tampering, they explained the feasibility of creating a scheduled task solely through registry key manipulation. Such an approach can bypass the generation of scheduled task creation event logs, such as 4698 and 106, providi...

MAL-2026-18001 Malicious code in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfeaf7d62b7951d7a5635f144b3833cacf9f21ca1e1aea2176fb84a51652e769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfeaf7d62b7951d7a5635f144b3833cacf9f21ca1e1aea2176fb84a51652e769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization,...

Malicious code in linguistic-silver-marlin (npm)

Source: amazon-inspector d4bdcca2c4c936494e9485c433b3fa49a8483abb0523961e720b3f847ea2a8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in light-silver-crane (npm)

Source: amazon-inspector e163dce4f3fa89dceb1d9b432814698224f571817dd85cc7b1c858cc0f437e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in juicy-silver-ferret (npm)

Source: amazon-inspector ed825045165dc249d9342dc368258f6d714bcc564f49b26d0e90bd3529fa306e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in itchy-silver-bandicoot (npm)

Source: amazon-inspector d7d1a7d1262342785e60ad468998bdd2775130836041d7a73f933a6226c1ec27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in isolated-silver-ape (npm)

Source: amazon-inspector c1bf3579bf50d1c12a6fa36e149c314108aba643f652b64a8de0ac59cf18e589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in intimate-silver-pony (npm)

Source: amazon-inspector 77857f073e5fff3e6d2fcf8597e348c4e978cbda748d26807ad309edbed9e09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in international-silver-turkey (npm)

Source: amazon-inspector fd92b399824949e720cb1655d6867d711999b0596f4ec133b7d194568b7c5d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inland-silver-toad (npm)

Source: amazon-inspector 298a085341af874d65d2acfa87b2e55d0ae6658eefcce475bf9dcc36876d5445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in independent-silver-turtle (npm)

Source: amazon-inspector c5146524a5491b8f8b5b0d7c09096983c8cad001e274ccbbf4cd31e4e6fa070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inappropriate-silver-pelican (npm)

Source: amazon-inspector 2ab481d663fcab2bda857940c929336287921afc510ef98b5e641eb9a263a7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in inappropriate-silver-herring (npm)

Source: amazon-inspector b5dd7eebe297665fb4e6e48d9f7324ffb00822cc5d44e10ea2b6ca73fae2433e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...