S3cur3Th1sSh1t/SharpVeeamDecryptor

Stars
150
Rank 247,323 (Top 5 %)
Language
C#
License
BSD 3-Clause "New...
Created about 1 year ago
Updated about 1 year ago

S3cur3Th1sSh1t/SharpVeeamDecryptor

S3cur3Th1sSh1t

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Decrypt Veeam database passwords

SharpVeeamDecryptor

Decrypt Veeam database passwords. Needs to be run from an elevated context on the Veeam Backup/Database Server.

I did not want to use SharpDPAPI or Mimikatz for a lot of stored passwords - so one tool to do everything was the way to go. :-)

More information here:

https://blog.checkymander.com/red%20team/veeam/decrypt-veeam-passwords/

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

Pentest-Tools

Amsi-Bypass-Powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

PowerSharpPack

OffensiveVBA

This repo covers some code execution and AV Evasion methods for Macros in Office documents

Creds

Some usefull Scripts and Executables for Pentest & Forensics

MultiPotato

SharpImpersonation

A User Impersonation tool - via Token or Shellcode injection

Invoke-SharpLoader

Caro-Kann

Encrypted shellcode Injection to avoid Kernel triggered memory scans

Ruy-Lopez

SharpNamedPipePTH

Pass the Hash to a named pipe for token Impersonation

Nim-RunPE

A Nim implementation of reflective PE-Loading from memory

NimGetSyscallStub

Get fresh Syscalls from a fresh ntdll.dll copy

NamedPipePTH

Pass the Hash to a named pipe for token Impersonation

SyscallAmsiScanBufferBypass

AmsiScanBufferBypass using D/Invoke

Nim_DInvoke

D/Invoke implementation in Nim

Excel-Phish

Phish password protected Excel-Files

Sharp-HackBrowserData

C# binary with embeded golang hack-browser-data

Get-System-Techniques

NimShellcodeFluctuation

ShellcodeFluctuation PoC ported to Nim

RDPThiefInject

RDPThief donut shellcode inject into mstsc

Invoke-Sharpcradle

Load C# Code straight to memory

Nim_CBT_Shellcode

CallBack-Techniques for Shellcode execution ported to Nim

LDAP-Signing-Scanner

A little scanner to check the LDAP Signing state

BitwardenDecryptBrute

Wordlist attacks on Bitwarden data.json files

SharpOxidResolver

IOXIDResolver from AirBus Security/PingCastle

SharpPolarBear

Privesc through import of Sheduled tasks + Hardlinks - CVE-2019-1069

SharpByeBear

AppXSVC Service race condition - privilege escalation

S3cur3Th1sSh1t

TeamViewerDecrypt

SharpLigolo

C# wrapper for ligolo

Invoke-WMI-Information

Straight forward script for WMI information gathering (local or remote)

EmpEISDecrypt

Decrypt Matrix42 Empirum /EIS Passwords

NimWinstaEveryoneAccess

darkamour_clone

WinFor

Powershell script to execute different forensic Powershell functions / tools on a compromised host

ssdp-poisoning

MimiMisc

SSJI---JSGen

Just a copy from here: https://gitlab.com/0x4ndr3/blog/blob/master/JSgen/JSgen.py

Hosts-File---AD-Tracking-Blocker

Hosts File for Blocking Advertising & Tracking Domains

nim-strenc

string encryption in Nim