p0dalirius

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

smbclient-ng, a fast and user friendly way to interact with SMB shares.

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

A python script to scan for Apache Tomcat server vulnerabilities.

A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE accesses.

This Python script can be used to bypass IP source restrictions using HTTP headers.

A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.

A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.

A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily

A python script to dump files and folders remotely from a Windows SMB share.

A python script to dump all the challenges locally of a CTFd-based Capture the Flag.

GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.

The ldap2json script allows you to extract the whole LDAP content of a Windows domain into a JSON file.

Python setter/getter for property ms-Mcs-AdmPwd used by LAPS.

A webshell application and interactive shell for pentesting Apache Tomcat servers.

A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.

A Python script to download PDB files associated with a Portable Executable (PE)

A python script to extract information from a Microsoft Remote Desktop Web Access (RDWA) application

A tool to remotely detect unusual sessions opened on windows machines using RPC

A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.

A webshell plugin and interactive shell for pentesting a WordPress website.

A python module to explore the object tree to extract paths to interesting objects in memory.

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

A simple python script to dump remote files through a local file read or local file inclusion web vulnerability.

A Python native library containing necessary classes, functions and structures to interact with Windows Active Directory.

Hydra wrapper for bruteforcing Microsoft Outlook Web Application.

The ldapconsole script allows you to perform custom LDAP requests to a Windows domain.

A python library to create BloodHound OpenGraphs

This exploit allows to connect to the remote RemoteMouse 3.008 service to virtually press arbitrary keys and execute code on the machine.

A webshell plugin and interactive shell for pentesting a Joomla website.

Memory mapping profiles for forensic analysis using volatility 2

This repository contains a list of python scripts to work with Microsoft RPC for research purposes.