sec-consult/houseofkeys

Stars
138
Rank 264,508 (Top 6 %)
Language
Created about 8 years ago
Updated about 8 years ago

sec-consult/houseofkeys

sec-consult

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

House of Keys

Certificates including the matching private key and various private keys found in the firmware of embedded systems. Most certificates are used as HTTPS server certificates. Some private keys are used as SSH host keys. Other uses of these cryptographic keys were not analyzed yet. The names of products that contained the certificates/keys are included as well.

Further information:

aggrokatz

Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it to parse LSASS dump files and registry hive files to extract credentials and other secrets stored without downloading the file and without uploading any suspicious code to the beacon.

msiscan

Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers

SEC-Xtractor_Hardware

SEC-Xtractor_Firmware

Nimpostor

Nimpostor is an implant written in Nim designed to work with MythicC2. It's mainly used for initial access and system enumeration.