sf

DCOMrade is a Powershell script that is able to enumerate the possible vulnerable DCOM applications that mightiness allow for lateral movement, code execution, information exfiltration, etc. The script is cook to piece of employment amongst Powershell 2.0 but volition piece of employment amongst all versions to a higher house every bit well. The script currently supports the next Windows operating systems (both x86 in addition to x64): Microsoft Windows 7 Microsoft Windows 10 Microsoft Windows Server 2012 / 2012 R2 Microsoft Windows Server 2016 How it works The script was made based on the inquiry done past times Matt Nelson ( @enigma0x3 ), particularly the round 2 blogpost that goes into finding DCOM applications that mightiness endure useful for pentesters in addition to cherry teams. First a remote connective amongst the target organization is made, this connective is used throughout the script for a multitude of operations. H5N1 Powershell ascendance is executed on t...

In many past times internal penetration tests I frequently had problems alongside the existing Powershell Recon / Exploitation scripts due to missing proxy support. For this argue I wrote my ain script alongside automatic proxy recognition in addition to integration. The script is to a greater extent than frequently than non based on well-known large other offensive safety Powershell projects. I exclusively charge them 1 after the other into RAM via IEX Downloadstring in addition to partially automate the execution to salve time. Yes it is non a C# in addition to it may hold out flagged past times antivirus solutions. Windows Defender for illustration blocks merely about of the known scripts/functions. Different local recon modules, domain recon modules, pivilege escalation in addition to exploitation modules. Any suggestions, feedback in addition to comments are welcome! Just Import the Modules alongside "Import-Module .\WinPwn_v0.7.ps1" or alongside iex (new-object n...

chkdfront checks if your domain fronting is working yesteryear testing the targeted domain (fronted domain) against your domain front end domain. Features Checking your domain fronted against the domain front. Searching an expected string inward the answer to betoken success. Showing troubleshooting suggestions when a examination fails based on the failure natural. Inspecting the HTTP asking together with answer when a examination fails. (optionally if succeeded). Troubleshooting alongside diverse checks (ping, HTTP, nslookup) when a examination fails. (optionally if succeeded). Support testing though proxy. Demo Please banking concern represent the demo https://asciinema.org/a/nA9wBiuSDLDH9SunQ8GxKT2ra Installation $ jewel install chkdfront Usage Help menu: -f, --front-target URL Fronted target domain or URL. e.g. images.businessweek.com -d, --domain-front DOMAIN DomainFront domain. ...

barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows yous to easily perform attacks on a running AWS infrastructure. It allows yous to laid upward on running EC2 instances without having the master copy instance SSH keypairs. It also allows yous to perform enumeration as well as extraction of stored Secrets as well as Parameters inwards AWS. Prerequisites An existing AWS line organisation human relationship access fundamental id as well as undercover (Token likewise inwards unopen to case) Python ii or 3. It tin sack run amongst both. To run the msfvenom payloads, yous withdraw msfvenom to live on available on your workstation, amongst the PATH setup correctly. Installing For python 2: pip install -r requirements.txt For python3 pip3 install -r requirements.txt Better to practise a virtualenv environs for the tool. Please banking concern annotation that using sudo amongst pip is non recommended. Author ...