France

vletoux

Elite
@vletoux

Security ninja trying to do on the CISO side what red teamers do for years (you know me for dcsync, setntlm, DCShadow & pingcastle)

MakeMeEnterpriseAdmin. PowerShell

268

SpoolerScanner. Check if MS-RPRN is remotely available with powershell/c#

181

NTLMInjector. In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)

171

SmbScanner. Smb Scanner from PingCastle

126

GidsApplet. Generic Identity Device Specification Applet

118

DetectPasswordViaNTLMInFlow. Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test passwords

60

ms17-010-Scanner. PowerShell

58

TestAntivirus. Test if an antivirus is installed via the resolution of the service virtual SID

55

OpenPGP-CSP. A CSP for the OpenPGP card - goal: add write support for certificate enrollment

44

Bluekeep-scanner. BlueKeep powershell scanner (based on c# code)

39

RPCForSMBLibrary. Extension of SMBLibrary for RPC calls

32

OxidBindings. Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)

26

ADSecrets. Set of ultra technical notes about AD

18

openpgpmdrv. OpenPGP smart card minidriver

14

awesome-windows-domain-hardening. A curated list of awesome Security Hardening techniques for Windows.

7

SubAuth. Sub Authentication package (for the talk you "try" to detect mimikatz)

5

Cyrating2TH. Cyrating Reputation alert importer for TheHive, an Open Source and Free Security Incident Response Platform

5

PingCastlePatrOwl. An Engine for PatrOwl allowing to run PingCastle scans

4

PINSniff. capture smart card pin via a filter driver (demo of you "try" to detect mimikatz)

3

mimikatz. A little tool to play with Windows security

2

SMBLibrary. Free, Open Source, User-Mode SMB 1.0/CIFS, SMB 2.0 and SMB 2.1 Server Library

2

conferences.

1

Windows-universal-samples. API samples for the Universal Windows Platform.

1

SharpHound. The BloodHound C# Ingestor

1

openex. Open Exercises Planning Platform

1

WinPmem. The multi-platform memory acquisition tool.

1

ExploitIncomingForestTrustBuilder. C++

1

vJCRE. Virtual Java Card Runtime Environment

1
28
Apply