zblurx

OffSec / Python3 / Rust / Go / Docker

zblurx / lapsv2_decryptor.py

Last active April 24, 2024 06:42

Simple script to extract local admin password in cleartext with LAPSv2 using impacket

	import argparse
	import typing
	import math
	from uuid import UUID
	from pyasn1.codec.der import decoder
	from pyasn1_modules import rfc5652
	from struct import unpack
	from cryptography import utils
	from cryptography.exceptions import AlreadyFinalized, InvalidKey
	from cryptography.hazmat.primitives.kdf import KeyDerivationFunction

zblurx / esc8fuzzer.py

Last active April 12, 2023 13:46

This script will find ADCS Web Enrollment portal vulnerable to ESC8 by simply fuzzing on the network

	from ipaddress import ip_network, summarize_address_range, ip_address
	import logging
	import socket
	import ssl
	import threading
	from queue import Queue
	import argparse

	class Worker(threading.Thread):
	def __init__(self, queue):