Tagged: Shadow Credentials

spray Shadow Credentials

ShadowSpray: spray Shadow Credentials

ShadowSpray A tool to spray Shadow Credentials across an entire domain in hopes of abusing long-forgotten GenericWrite/GenericAll DACLs over other objects in the domain. Why this tool In a lot of engagements, I see (in...

Shadow Credentials attacks

pywhisker: Python tool for Shadow Credentials attacks

PyWhisker pyWhisker is a Python equivalent of the original Whisker made by Elad Shamir and written in C#. This tool allows users to manipulate the msDS-KeyCredentialLink attribute of a target user/computer to obtain full control over that object. It’s...