jstnkndy

.0.0
%00/
.000
.0.0.0
0000
00000
000000
00000000
000000000000.cfg
000000000000-directory~.xml

jstnkndy

Important: I'm writing this when the last version of macOS (and the one I have installed) is Mojave.

After reading a few articles I ended up with this steps:

1. On macOS, download the High Sierra installer (even if you have Mojave installed): https://itunes.apple.com/us/app/macos-high-sierra/id1246284741?ls=1&mt=12
2. If the High Sierra Installer starts, quit it.
3. Open "Disk Utility".
4. Click on "File" > "New Image" > "Blank image...". Or just press cmd+N.
5. In the "Size" field, enter 13 GB and save it wherever you want.

jstnkndy

#!/usr/bin/env python3
from ldap3 import ALL, Server, Connection, NTLM, extend, SUBTREE
import argparse

parser = argparse.ArgumentParser(description='Dump LAPS Passwords')
parser.add_argument('-u','--username',  help='username for LDAP', required=True)
parser.add_argument('-p','--password',  help='password for LDAP (or LM:NT hash)',required=True)
parser.add_argument('-l','--ldapserver', help='LDAP server (or domain)', required=False)
parser.add_argument('-d','--domain', help='Domain', required=True)
parser.add_argument('-t', '--target', help="Target Domain", required=False)

jstnkndy

import boto3
import argparse
import sys
from collections import deque
from threading import Thread, Lock
from queue import Queue


lock = Lock()

jstnkndy

#!/usr/bin/python

'''
This script can be used to identify passwords that are being used across multiple accounts.
Example: python3 password_reuse.py <file in username:hash format>
'''

import sys
from pprint import pprint
from collections import defaultdict