cesarsilence Goto Github PK

adcsync

Use ESC1 to perform a makeshift DCSync and dump hashes

atp-powershell-scripts

Microsoft Signed PowerShell scripts

augustus

Evasive Golang Loader

awesome-azure-pentest

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

azure-red-team

Azure Security Resources and Notes

certsync

Dump NTDS with golden certificates and UnPAC the hash

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

cve-2022-33679

One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html

cve-2022-44666

Write-up for another forgotten Windows vulnerability (0day): Microsoft Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape, which was not fully fixed as CVE-2022-44666 in the patches released on December, 2022.

dfscoerce

donpapi

Dumping DPAPI credz remotely

follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

giuda

Ask a TGS on behalf of another user without password

impacket

Impacket is a collection of Python classes for working with network protocols.

internal-windows-tools

krbuacbypass

UAC Bypass By Abusing Kerberos Tickets

nopowershell

PowerShell rebuilt in C# for Red Teaming purposes

passfiltex

PassFiltEx. An Active Directory Password Filter.

poc-cve-2022-26809

PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.

powergram

Multiplatform Telegram Bot in pure PowerShell

powershellkerberos

Some scripts to abuse kerberos using Powershell

powerview.py

PowerView alternative

printnightmare

Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)

proxynotshell-poc

ransomware-simulator

Ransomware simulator written in Golang

rbcd-attack

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

remotepotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

servicedetector

Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin privileges.

sff

sharpsniper

Find specific users in active directory via their username and logon IP address