With kerbrute.py:
python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>
With Rubeus version with brute module:
At work recently I needed to pull together some information from the registry of a few thousand machines and include the last time the key had been updated. Lately I've been turning to Powershell more and more for my day to day tasks and this time was no different. However this simple task turned out to not be so easy, and it all revolved around acquiring the LastWriteTime of the registry keys. | |
Digging through WMI and .NET proved less fruitful than I had hoped, so off to Google I went. It seemed everyone had the solution if you wanted to query the machine locally, but with thousands of hosts in my Enterprise that wasn't going to work. Plus, who doesn't enjoy a good challenge. One particular script was very useful in pointing my team in the right direction, posted by Tim Medin over at blog.securitywhole.com. So we decided to adapt and modify his script to work with remote hosts. | |
I've only tested against a few machines at home, but I wanted to share it while I had time. I will update the post if I find issues |
using System; | |
using System.Diagnostics; | |
using System.Reflection; | |
using System.ComponentModel; | |
using System.Security.AccessControl; | |
using System.Security.Principal; | |
using System.Runtime.InteropServices; | |
using System.Configuration.Install; |
# Copyright 2019, Alexander Hass | |
# https://www.hass.de/content/setup-microsoft-windows-or-iis-ssl-perfect-forward-secrecy-and-tls-12 | |
# | |
# After running this script the computer only supports: | |
# - TLS 1.2 | |
# | |
# Version 3.0.1, see CHANGELOG.txt for changes. | |
Write-Host 'Configuring IIS with SSL/TLS Deployment Best Practices...' | |
Write-Host '--------------------------------------------------------------------------------' |
/admin | |
/admin-console | |
/docs/ | |
/examples | |
/examples/jsp/index.html | |
/examples/jsp/snp/snoop.jsp | |
/examples/jsp/source.jsp | |
/examples/servlet/HelloWorldExample | |
/examples/servlet/SnoopServlet | |
/examples/servlet/TroubleShooter |
With kerbrute.py:
python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>
With Rubeus version with brute module:
/* | |
RunPE for x64 - classic RunPE for 64-bit executables | |
Copyright (C) 2020 Valentin-Gabriel Radu | |
This program is free software; you can redistribute it and/or modify | |
it under the terms of the GNU General Public License as published by | |
the Free Software Foundation; either version 2 of the License, or | |
(at your option) any later version. | |
This program is distributed in the hope that it will be useful, |