[ How to Exploit Active Directory ACL Attack Paths Through LDAP Relaying Attacks ]

https://www.praetorian.com/blog/how-to-exploit-active-directory-acl-attack-paths-through-ldap-relaying-attacks/

#ad
#acl
#ldap
#relay
@NetPentesters

Tool to scan user data with neural networks

Octopii is an AI based user information scanner that uses Tesseract's Optical Character Recognition (OCR) and MobileNet's Convolutional Neural Network (CNN) model.

Allows you to detect various forms of government IDs, passports, debit cards, driver's licenses, photographs, signatures, etc.

https://github.com/redhuntlabs/Octopii

#redteam #leak
@NetPentesters

Maximizing BloodHound with a simple suite of tools

[Maximizing BloodHound with a simple suite of tools]
A set of console utilities for working with Bloodhound. Retrieve/update objects, mark objects as Owned/High Value Targets, delete objects, match shattered passwords (hashcat) with users, execute raw DB query...

https://github.com/knavesec/Max

#AD
#bloodhound
@NetPentesters

SMB Session Spoofing: create a fake SMB Session

https://securityonline.info/smb-session-spoofing-create-a-fake-smb-session/

#SMB
#spoofing
@NetPentesters

VLAN attacks toolkit

The author has nothing to do with those who will use this tool for personal purposes to destroy other people's computer networks. The tools are presented for training purposes to help engineers improve the security of their network.
https://github.com/necreas1ng/VLANPWN
#VLAN
@NetPentesters

​​Active-Directory-Purple-Teaming

This repository is aimed at sharing the cliff notes for performing Red Teaming of Active Directory System combined with Detection Engineering part of AD Attacks

https://github.com/MirHassanRiaz/Active-Directory-Purple-Teaming

#ad
@NetPentesters

Pentesting Active directory



#AD
@NetPentesters

CVE-2022-26937

Microsoft Windows Network File System NLM Portmap Stack Buffer Overflow

https://www.zerodayinitiative.com/blog/2022/6/7/cve-2022-26937-microsoft-windows-network-file-system-nlm-portmap-stack-buffer-overflow

#exploit

@NetPentesters

​DNS_Tunneling

DNS Tunneling using powershell to download and execute a payload. Works in CLM.

https://github.com/Octoberfest7/DNS_Tunneling

@NetPentesters

​Cloud penetration testing

A curateinfrastrucd list of cloud pentesting resource, contains AWS, Azure, Google Cloud

https://github.com/kh4sh3i/cloud-penetration-testing
#Cloud
@NetPentesters

​Aced

Aced is a tool to parse and resolve a single targeted Active Directory principal's DACL. Aced will identify interesting inbound access allowed privileges against the targeted account, resolve the SIDS of the inbound permissions, and present that data to the operator.

Additionally, the logging features of pyldapsearch have been integrated with Aced to log the targeted principal's LDAP attributes locally which can then be parsed by pyldapsearch's companion tool BOFHound to ingest the collected data into BloodHound.

https://github.com/garrettfoster13/aced

#ad
#tools
@NetPentesters

MikroTik Cloud Hosted Router Universal Unpatchable Jailbreak

Universal "unpatchable" jailbreak for all MikroTik RouterOS versions:

1. Download Cloud Router VM image, boot it in your favourite hypervisor
2. Suspend / save to disk
3. Replace /nova/bin/login with /bin/sh in the saved memory image
4. Restore the running VM from the memory image

https://github.com/pedrib/PoC/blob/master/tools/mikrotik_jailbreak.py

#mikrotik
@NetPentesters

​CVE-2022-26937

Windows Network File System Crash PoC

https://github.com/omair2084/CVE-2022-26937

#cve
@NetPentesters

A tool to quickly scan subdomains

https://github.com/zidansec/subscan
#tools
@NetPentesters

This tool uses LDAP to check a domain for known abusable Kerberos delegation settings. Currently, it supports RBCD, Constrained, Constrained w/Protocol Transition, and Unconstrained Delegation checks.

Despite the name, I decided to add in a couple more features since the bulk of the code was already there. So now there is a get-spns command as well which can look for ASREP accounts or Kerberoastable SPNs.

https://github.com/IcebreakerSecurity/DelegationBOF


#tools
@NetPentesters

#pentest #bugbounty #recon
A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and more

https://github.com/edoardottt/awesome-hacker-search-engines

@DK_HBB2

​Garud

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.

https://github.com/R0X4R/Garud

@NetPentesters

Finding all things on-prem Microsoft for password spraying and enumeration.

The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft solutions. Screenshots of the tool in action are below:

https://github.com/puzzlepeaches/msprobe

@NetPentesters