Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
knavesec/credmaster 的主要功能包括:Brute Force, Initial Access Frameworks, Microsoft Service Exploitation, Phishing and Access。
knavesec/credmaster 的开源替代品包括: nyxgeek/o365recon — script to retrieve information via O365 and AzureAD with a valid cred. byt3bl33d3r/sprayingtoolkit — Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient. sensepost/ruler — A tool to abuse Exchange services. samratashok/nishang — Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows… bats3c/darkarmour — Store and execute an encrypted windows binary from inside memory, without a single bit touching disk. 9emin1/charlotte — c++ fully undetected shellcode launcher ;).
script to retrieve information via O365 and AzureAD with a valid cred
Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient
Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows targets. It functions as a post-exploitation toolkit and payload generator to automate attacks and manage remote targets. The project provides specialized capabilities for bypassing security controls, such as disabling the Antimalware Scan Interface and employing in-memory execution to avoid disk-based detection. It includes a variety of stealthy command and control mechanisms, utilizing non-standard channels like DNS TXT records, ICMP traffic, and webmail for communication a