Rob Fuller
Rob Fuller
like 'requests'
Neo4j Query with Blood Hound data: ``` MATCH (c1:Computer)-[:MemberOf*1..]->(g:Group) WHERE g.objectsid ENDS WITH '-516' WITH COLLECT(c1.name) AS domainControllers MATCH (c2:Computer {unconstraineddelegation:true}) WHERE NOT c2.name IN domainControllers RETURN c2.name,c2.operatingsystem ORDER BY...
There are X users who have their passwords stored in active directory. These accounts were verified to have these passwords still active and the accounts are enabled. This is usually...
It would be awesome if Covenant would notify you if the hashes for any files built by the launchers showed up on Virus Total. I made this functionality in ruby...
I'm not sure what might have gone wrong here: ``` Unhandled Exception: System.InvalidOperationException: Not listening. You must call the Start() method before calling this method. at System.Net.Sockets.TcpListener.BeginAcceptTcpClient(AsyncCallback callback, Object state)...
It would be nice to have the ability with Inviegh Relay to query AD like NTLMRelayX does for LAPS passwords and such
It would be nice to have a few LDAP queries be run via each unique account name that is relayed, such as LAPS passwords ref: https://github.com/Kevin-Robertson/Inveigh/issues/26
``` |====================================================================| | | | Windows Privilege Escalation | | | | ! BANG BANG ! | | | |====================================================================| beRoot.exe : [4332] Failed to execute script beRoot + CategoryInfo...