Rob Fuller
Rob Fuller
This is what it took me on Debian 9 to get working with Perl 5.24.1
Many times if you have the ability to connect to a remote host (WMI, SMB etc) that firewall will allow something like a Named Pipe inbound, but many times, the...
Sometimes when executing in scenarios where a static proxy is set for users the same cannot be said for NT AUTHORITY users on Windows systems, like SYSTEM / LOCAL SERVICE....
1) It would be nice to be able to port sweep a range: `portscan -p 3389 -r 192.168.0.0/24` 2) It would be nice to be able to port scan an...
In Metasploit you can create a binary that migrates to a specified process name prior to executing the shellcode. It would be amazing I could specify a prependmigrate option in...
Allow DNS C2 to use a specified DNS target instead of the built in system DNS channel.
It'd be nice if there was a way to specify the host you wanted to SMB relay the authentication to, as sometimes it isn't your attacking machine.
BlackHat 2015 Talk: WSUSpect – Compromising the Windows Enterprise via Windows Update Video: https://www.youtube.com/watch?v=assJWqBe-vk Paper: http://www.contextis.com/news/new-paper-released-compromising-windows-enterprise/ Basically would like to have a fake "WSUS" server script that serves up fake...
It would be very awesome to support kerberos (if possible) for password changes.
It would be really awesome if this project supported NTLM authentication. I've been trying to get it to work by adding the required pieces to lib/webdav.go, but I think more...