Focused crawls are collections of frequently-updated webcrawl data from narrow (as opposed to broad or wide) web crawls, often focused on a single domain or subdomain.
Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.
LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.
Empire has a persistence implant called Install-SSP (See #9) which already supports dropping password filter implants on compromised machines. Instead of creating a new persistence module we should leverage the existing module and embed the exfitration parameters inside the DLL.
This will require a custom build of the implant but should integrate more nicely.
This repository will be updated with all the examples and links that I can find with relevant knowledge & information about CP in MS Windows vista up to version 10.
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
Empire has a persistence implant called
Install-SSP(See #9) which already supports dropping password filter implants on compromised machines. Instead of creating a new persistence module we should leverage the existing module and embed the exfitration parameters inside the DLL.This will require a custom build of the implant but should integrate more nicely.
We could optionally make a sma