S3cur3Th1sSh1t/WinPwn
WinPwn
WinPwn is a Windows penetration testing framework and security toolkit designed for auditing Active Directory and exploiting Windows environments. It provides a collection of automated tools and scripts for domain enumeration, credential theft, and privilege escalation.
The toolkit distinguishes itself through capabilities for neutralizing antimalware scanning interfaces to evade detection and providing offline binary packaging for execution on isolated systems without internet access. It also includes specialized utilities for intercepting and relaying SMB authentication traffic to gain unauthorized network access.
The project covers a broad surface of security auditing, including local system inspection for software inventories, domain asset mapping to identify network vulnerabilities, and the extraction of passwords and hashes from system memory and browser histories. It further includes methods for gaining higher system permissions by identifying registry misconfigurations and kernel vulnerabilities.
Features
- Active Directory Security Tools - Maps network assets and audits directory users and groups to identify weaknesses in Active Directory configurations.
- Network Discovery and Enumeration - Maps directory users and groups through active scanning of domain services and network shares.
- SMB Relay Attacks - Intercepts authentication traffic and redirects it to a target system to gain unauthorized network access.
- SMB Relay Tools - Intercepts and relays authentication traffic to gain unauthorized access to resources.
- Credential Memory Extraction - Retrieves passwords and hashes by scanning system memory and analyzing local storage files.
- Security Product Evasions - Neutralizes antimalware scanning interfaces and blocks event tracing to evade detection during exploitation.
- Credential Extraction - Retrieves passwords and hashes from system memory, system files, and browser histories.
- Windows Privilege Escalation Suites - Provides a toolset for identifying misconfigurations and exploiting kernel vulnerabilities to gain higher system permissions.
- Credential Extraction Utilities - Provides a utility for retrieving passwords and hashes from system memory, files, and browser histories.
- Active Directory Enumerations - Enumerates directory users and groups to map the Active Directory environment and identify domain vulnerabilities.
- Privilege Escalation Scanning - Facilitates gaining higher system permissions by scanning for and exploiting misconfigurations and registry weaknesses.
- Registry-Based Escalations - Increases system permissions by identifying and modifying insecure configuration keys within the Windows registry.
- Penetration Testing Suites - Provides a comprehensive collection of automated tools and scripts for security auditing and exploiting Windows environments.
- SMB Relay Attack Execution - Intercepts and relays SMB authentication traffic using session management to gain unauthorized network access.
- SMB Relay Attacks - Intercepts and relays authentication traffic to gain unauthorized access to network resources.
- Windows Vulnerability Assessments - Automates security assessments on Windows systems to identify vulnerabilities and test defense mechanisms.
- Standalone Binary Packaging - Bundles required scripts and binaries into standalone packages for execution on isolated systems.
- Script Wrapper Executables - Provides standalone packages for executing essential scripts and binaries on systems without internet connectivity.
- Offline Security Auditing - Executes security scripts and binaries on isolated systems that lack an active internet connection.
- Host Reconnaissance - Provides automated collection of software inventories, network shares, and sensitive files from targeted hosts.
- AMSI and WLDP Patchers - Provides capabilities to neutralize antimalware scanning interfaces by patching runtime memory to avoid detection.
- PowerShell Tooling - Automates various Windows penetration testing tasks.
- Privilege Escalation Tools - Tool for Windows privilege escalation and enumeration.
