TaskHound

Windows Privileged Scheduled Task Discovery Tool for fun and profit. TaskHound hunts for Windows scheduled tasks that run with privileged accounts and stored credentials. It enumerates tasks over SMB, parses XMLs, and identifies high-value attack opportunities through BloodHound integration. For...

pipe_finder

Pipe Finder 1.0 Script automatizado para buscar en el protocolo SMB nombres de pipe disponibles Capturas de pantalla Requisitos metasploit-framework wget locate módulo pipeauditv2.rb https://github.com/peterpt/pipeauditorfb - Se instalará en la primera ejecución Requisitos de instalación apt-get...

SMBSR

¡ALTO AHÍ! ¡Esta herramienta ya no se mantiene! Se ha decidido fusionar las funcionalidades de SMBSR y RSMBI. Por favor, consulta SMBAT SMBSR - ¿Qué es eso? Bueno, SMBSR es un script de Python que, dado un CIDR/IP/archivoIP/HOSTNAMEs, enumera todos los servicios SMB en escucha 445 entre los...

nullinux

nullinux Nullinux es una herramienta de pruebas de penetración interna para Linux que se puede utilizar para enumerar información del SO, información del dominio, recursos compartidos, directorios y usuarios a través de SMB. Si no se proporcionan nombre de usuario y contraseña en los argumentos d...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...

OSCP

OSCP OSCP Study Guide Table of Contents Enumeration and Recon Web Enumeration Nikto scanning: root@kitploit: nikto -h http://10.10.10.1 Directory busting with different tools: DIRB root@kitploit: dirb http://10.10.10.1 Gobuster root@kitploit: gobuster dir -u http://10.129.155.74:3000 -w...

wannacry-soc-lab

WannaCry SOC Investigation Lab Overview This project simu...

redteam-notebook

It is an offensive tool for network and web exploitation. The repository, redteam-notebook, contains a collection of commands, tips, and tricks for preparation and execution of red teaming activities, specifically for the OSCP exam. The primary vulnerability targeted is not explicitly stated, but...

Nmap NSE net: smb-enum-shares

Attempts to list shares using the 'srvsvc.NetShareEnumAll' MSRPC function and retrieve more information about them using 'srvsvc.NetShareGetInfo'. If access to those functions is denied, a list of common share names are checked. Finding open shares is useful to a penetration tester because there...

Nmap NSE net: smb-enum-groups

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...