From f7c8413c38d122be0ed93b77440a770df3eee9b5 Mon Sep 17 00:00:00 2001 From: S3cur3Th1sSh1t <27858067+S3cur3Th1sSh1t@users.noreply.github.com> Date: Wed, 23 Nov 2022 11:46:09 +0100 Subject: [PATCH] Add Credits --- README.md | 24 ++++++++++++++++++------ 1 file changed, 18 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index f098fad..380e444 100644 --- a/README.md +++ b/README.md @@ -436,12 +436,6 @@ C# project to check LDAP signing. @Credit to: https://github.com/cube0x0/LdapSignCheck -**KrbRelayUp** - -KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings). - -@Credit to: https://github.com/Dec0ne/KrbRelayUp - **SharpImpersonation** SharpImpersonation - A User Impersonation tool - via Token or Shellcode injection. @@ -466,6 +460,24 @@ Framework for Kerberos relaying @Credit to: https://github.com/cube0x0/KrbRelay +**SharpSCCM** + +A C# utility for interacting with SCCM + +@Credit: https://github.com/Mayyhem/SharpSCCM + +**ShadowSpray** + +A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain. + +@Credit: https://github.com/Dec0ne/ShadowSpray + +**Grouper3** + +Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did. + +@Credit to: https://github.com/Group3r/Group3r + #### _The last two are basically no Assemblies. But I did built an Assembly to execute them from memory, which is loadable via the technique from this repo. Another technique in the background for execution, but still usefull_: