Pybatfish - Python Client For Batfish (Network Configuration Analysis Tool)

http://www.kitploit.com/2022/05/pybatfish-python-client-for-batfish.html

#tools
#Analysis
@NetPentesters

NTLMRelay2Self

Escalate privileges locally by forcing the system you landed initial access on to reflectively authenticate over HTTP to itself and forward the received connection to an HTTP listener (ntlmrelayx) configured to relay to DC servers over LDAP/LDAPs for either setting shadow credentials or configuring RBCD.

#LDAP
#privesc
#relay
#webdav
#lpe
https://github.com/med0x2e/NTLMRelay2Self
@NetPentesters

RCE in BIG-IP iControl REST (CVE-2022-1388)

This vulnerability could allow an unauthenticated attacker with network access to a BIG-IP system to execute arbitrary system commands, create or delete files, or disable services (CVE-2022-1388)

Dork for Shodan:

http.noscript:"BIG-IP®-+Redirect" +"Server"

https://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP

#web
#cve
#rce
@NetPentesters

ICMP-TransferTools is a set of noscripts designed to move files to and from Windows hosts in restricted network environments.

https://github.com/icyguider/ICMP-TransferTools

#icmp
#file
#transfer
#bypass
#firewall
@NetPentesters

PPID Spoofing & BlockDLLs with NtCreateUserProcess

https://offensivedefence.co.uk/posts/ntcreateuserprocess

@NetPentesters

SearchMap Information Collection Tool

https://reconshell.com/searchmap-information-collection-tool/


@NetPentesters

[ How to Exploit Active Directory ACL Attack Paths Through LDAP Relaying Attacks ]

https://www.praetorian.com/blog/how-to-exploit-active-directory-acl-attack-paths-through-ldap-relaying-attacks/

#ad
#acl
#ldap
#relay
@NetPentesters

Tool to scan user data with neural networks

Octopii is an AI based user information scanner that uses Tesseract's Optical Character Recognition (OCR) and MobileNet's Convolutional Neural Network (CNN) model.

Allows you to detect various forms of government IDs, passports, debit cards, driver's licenses, photographs, signatures, etc.

https://github.com/redhuntlabs/Octopii

#redteam #leak
@NetPentesters

Maximizing BloodHound with a simple suite of tools

[Maximizing BloodHound with a simple suite of tools]
A set of console utilities for working with Bloodhound. Retrieve/update objects, mark objects as Owned/High Value Targets, delete objects, match shattered passwords (hashcat) with users, execute raw DB query...

https://github.com/knavesec/Max

#AD
#bloodhound
@NetPentesters

SMB Session Spoofing: create a fake SMB Session

https://securityonline.info/smb-session-spoofing-create-a-fake-smb-session/

#SMB
#spoofing
@NetPentesters

VLAN attacks toolkit

The author has nothing to do with those who will use this tool for personal purposes to destroy other people's computer networks. The tools are presented for training purposes to help engineers improve the security of their network.
https://github.com/necreas1ng/VLANPWN
#VLAN
@NetPentesters

​​Active-Directory-Purple-Teaming

This repository is aimed at sharing the cliff notes for performing Red Teaming of Active Directory System combined with Detection Engineering part of AD Attacks

https://github.com/MirHassanRiaz/Active-Directory-Purple-Teaming

#ad
@NetPentesters

Pentesting Active directory



#AD
@NetPentesters

CVE-2022-26937

Microsoft Windows Network File System NLM Portmap Stack Buffer Overflow

https://www.zerodayinitiative.com/blog/2022/6/7/cve-2022-26937-microsoft-windows-network-file-system-nlm-portmap-stack-buffer-overflow

#exploit

@NetPentesters

​DNS_Tunneling

DNS Tunneling using powershell to download and execute a payload. Works in CLM.

https://github.com/Octoberfest7/DNS_Tunneling

@NetPentesters

​Cloud penetration testing

A curateinfrastrucd list of cloud pentesting resource, contains AWS, Azure, Google Cloud

https://github.com/kh4sh3i/cloud-penetration-testing
#Cloud
@NetPentesters

​Aced

Aced is a tool to parse and resolve a single targeted Active Directory principal's DACL. Aced will identify interesting inbound access allowed privileges against the targeted account, resolve the SIDS of the inbound permissions, and present that data to the operator.

Additionally, the logging features of pyldapsearch have been integrated with Aced to log the targeted principal's LDAP attributes locally which can then be parsed by pyldapsearch's companion tool BOFHound to ingest the collected data into BloodHound.

https://github.com/garrettfoster13/aced

#ad
#tools
@NetPentesters