vletoux Goto Github PK

adsecrets

Set of ultra technical notes about AD

awesome-windows-domain-hardening

A curated list of awesome Security Hardening techniques for Windows.

bluekeep-scanner

BlueKeep powershell scanner (based on c# code)

conferences

cyrating2th

Cyrating Reputation alert importer for TheHive, an Open Source and Free Security Incident Response Platform

detectpasswordviantlminflow

Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test passwords

engine_pkcs11

OpenSSL engine for PKCS#11 modules

exploitincomingforesttrustbuilder

gidsapplet

Generic Identity Device Specification Applet

libp11

PKCS#11 wrapper library

makemeenterpriseadmin

mimikatz

A little tool to play with Windows security

ms17-010-scanner

ntlminjector

In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)

openex

Open Exercises Planning Platform

openpgp-csp

A CSP for the OpenPGP card - goal: add write support for certificate enrollment

openpgpmdrv

OpenPGP smart card minidriver

opensc

Open source smart card tools and middleware. PKCS#11/MiniDriver/Tokend

oxidbindings

Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

pingcastlecloud

Audit program for AzureAD

pingcastlepatrowl

An Engine for PatrOwl allowing to run PingCastle scans

pingcastlepowerbiconnector

PowerBI Connector for PingCastle Enterprise

pinsniff

capture smart card pin via a filter driver (demo of you "try" to detect mimikatz)

rpcforsmblibrary

Extension of SMBLibrary for RPC calls

sharphound

The BloodHound C# Ingestor

smblibrary

Free, Open Source, User-Mode SMB 1.0/CIFS, SMB 2.0 and SMB 2.1 Server Library

smbscanner

Smb Scanner from PingCastle

spoolerscanner

Check if MS-RPRN is remotely available with powershell/c#

subauth

Sub Authentication package (for the talk you "try" to detect mimikatz)