Category: Password Attacks

spray Shadow Credentials

ShadowSpray: spray Shadow Credentials

ShadowSpray A tool to spray Shadow Credentials across an entire domain in hopes of abusing long-forgotten GenericWrite/GenericAll DACLs over other objects in the domain. Why this tool In a lot of engagements, I see (in...

Crack zip encryption

bkcrack: Crack legacy zip encryption

bkcrack Crack legacy zip encryption with Biham and Kocher’s known-plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a...

Oracle Database Attack Toolkit

wodat: Windows Oracle Database Attack Toolkit

Windows Oracle Database Attack Tool (wodat) Simple port of the popular Oracle Database Attack Tool (ODAT) to C# .Net Framework. Perform password-based attacks e.g. username as password, username list against given password, password list against...

password spraying tool

spraycharles: Low and slow password spraying tool

spraycharles Low and slow password spraying tool, designed to spray on an interval over a long period of time. Associated blog post by @sprocket_ed covering NTLM over HTTP, Exchange Web Services, and spraycharles. Usage Config File It...