byt3bl33d3r/CrackMapExec

Stars
7,779
Rank 4,883 (Top 0.1 %)
Language
Python
License
BSD 2-Clause "Sim...
Created over 9 years ago
Updated about 1 year ago

byt3bl33d3r/CrackMapExec

byt3bl33d3r

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A swiss army knife for pentesting networks

⛔ [DEPRECATED] This repository is deprecated, follow this link to find the active repository https://github.com/mpgn/CrackMapExec

🚩 This is the public repository of CrackMapExec, for latest version and updates please consider supporting us through https://porchetta.industries/

CrackMapExec

In partnership with

🚩 Sponsors

If you want to sponsors this project and have the latest updates on CME, latest issues fixed, latest features, please support us on https://porchetta.industries/

Official Discord Channel

Come hang out on Discord!

Acknowledgments

(These are the people who did the hard stuff)

This project was originally inspired by:

Unintentional contributors:

The Empire project
@T-S-A's smbspider script
@ConsciousHacker's partial Python port of Invoke-obfuscation from the GreatSCT project

Documentation, Tutorials, Examples

See the project's wiki for documentation and usage examples

Installation

Please see the installation on the GitBook

To do

~~0wn everything~~

MITMf

Framework for Man-In-The-Middle attacks

OffensiveNim

My experiments in weaponizing Nim (https://nim-lang.org/)

SILENTTRINITY

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

DeathStar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

SprayingToolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

gcat

A PoC backdoor that uses Gmail as a C&C server

ItWasAllADream

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

WitnessMe

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

pth-toolkit

Modified version of the passing-the-hash tool collection made to work straight out of the box

OffensiveDLR

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

SpamChannel

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

chrome-decrypter

Python script to decrypt saved Chrome usernames and passwords on windows

arpspoof

Python clone of arpspoof that can poison hosts via arp-requests as well as arp-replies

sslstrip2

A mirror of the original SSLstrip+ code by Leonardo Nve

AnsiblePlaybooks

A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools

NimDllSideload

DLL sideloading/proxying with Nim!

duckhunter

Converts a USB Rubber ducky script into a Kali Nethunter friendly format for the HID attack

Slides

Slides from various talks that I've given over the years

DHCPShock

Spoofs a DHCP server and exploits all clients vulnerable to the 'ShellShock' bug

BOF-Nim

Cobalt Strike BOF Files with Nim!

BeEF-API

Python library that facilitates interfacing with BeEF via it's RESTful API

webview_d3

Generate graphs with NetworkX, natively visualize with D3.js and pywebview

Naga

A C# stager for SILENTTRINITY (https://github.com/byt3bl33d3r/SILENTTRINITY)

Invoke-AutoIt

Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes

wifi-graper

Automatically get internetz from access points that have MAC based filtering enabled

toby

Recursively searches a directory for any file containing a specified string

CME-PowerShell-Scripts

A collection of modifed PowerShell Scripts for CrackMapExec (https://github.com/byt3bl33d3r/CrackMapExec)

MemeGenerator

Modern problems require modern solutions

pythoncookie

My Python Cookiecutter project template

tailscalesd

Prometheus Service Discovery for Tailscale (Python Edition)

SponsorMonitor

Monitor Github Sponsors and automatically add/remove them to/from a Github Organization Team.

Kaliya

A cross-platform stager for SILENTTRINITY (https://github.com/byt3bl33d3r/SILENTTRINITY)

cmd2powershell

Converts a command to a base64 powershell compatible string

Utinni

An async Python client library for Empire's RESTful API

MITMf-opt-plugins

Optional plugins for MITMf

hookme

Automatically exported from code.google.com/p/hookme

jamaal-re-tools

Automatically exported from code.google.com/p/jamaal-re-tools

byt3bl33d3r.github.io

Trying to take the dum-dum out of security

BOF-Zig

Cobalt Strike BOF with Zig!

byt3bl33d3r

Github Profile Readme

LocoCrack

A loco version of BozoCrack with some improvements (https://github.com/juuso/BozoCrack)

sergio-proxy

Original Sergio-Proxy code written by Ben Schmidt (@_supernothing)

externalip

Prometheus client that exposes your external IP address

conky-gr33n

Conky config for everyone who likes a lot of green

conky-r3d

Conky config for everyone who likes a lot of red

playwright-heap-snapshot

API and CLI tool to fetch and query Chome DevTools heap snapshots (Python & Playwright)