SecureThisShit/WinPwn

Features

• Active Directory Assessment - Provides a comprehensive suite for auditing and analyzing security configurations within Windows Active Directory environments.
• Penetration Testing Frameworks - Provides a comprehensive framework for conducting internal security assessments and privilege escalation on Windows environments.
• Credential Theft and Cracking Suites - Extracts stored passwords and hashes from system memory and browsers to facilitate unauthorized access.
• Internal Network Penetration Testers - Conducts scanning and lateral movement within internal networks using SMB relay attacks and resource enumeration.
• SMB Relay Attacks - Automates the interception and relaying of SMB authentication traffic to gain unauthorized network access.
• Credential Memory Extraction - Extracts authentication secrets and password hashes from system memory using obfuscated techniques.
• Credential Extraction - Retrieves passwords and hashes from memory, registries, and browsers using obfuscated extraction techniques.
• Windows Privilege Escalation Suites - Offers a specialized toolkit of scripts to identify misconfigurations and deploy kernel exploits for local administrative access.
• Credential Extraction Utilities - Extracts passwords and hashes from system memory, registries, and browsers using obfuscated techniques.
• Kernel Privilege Escalation Exploits - Deploys functional exploits targeting kernel-level vulnerabilities to achieve the highest level of system control.
• Active Directory Enumerations - Provides specialized discovery and mapping of users and trusts within Windows Active Directory environments.
• Windows Privilege Escalations - Elevates limited user processes to SYSTEM or Administrator using Windows service misconfigurations and kernel exploits.
• Active Directory Security Tools - Ships utilities for enumerating domain infrastructure and identifying delegation vulnerabilities within Active Directory.
• Kernel-Level Bypass Utilities - Includes utilities to modify kernel verification logic and execute low-level vulnerabilities for system control.
• SMB Relay Attacks - Intercepts and reuses authentication hashes via SMB-Relay attacks to access network resources.
• Standalone Binary Packaging - Bundles all required scripts and binaries into a single standalone package for portable execution.
• DLL Hijacking - Identifies and replaces system DLLs to elevate privileges during application startup.
• Offline Host Collection - Runs standalone binaries on isolated endpoints to perform security operations in air-gapped environments.
• Access Control Bypasses - Circumvents authentication and monitoring mechanisms to avoid detection by system security tools.
• Security Product Evasions - Neutralizes antimalware and event tracing interfaces to avoid detection during security audits.
• Offline Security Auditing - Executes security assessments and audits on isolated systems without requiring internet or network access.
• Host Reconnaissance - Collects software lists, network shares, and system privileges from compromised hosts for local reconnaissance.
• Security Monitoring Evasions - Disables event tracing and malware scanning interfaces to prevent detection by host security tools.
• Windows Security Utilities - Automates reconnaissance and privilege escalation on Windows domains.

Star history