Skip to content

Lumberjack: An Active Directory vulnerability identification, exploitation, & reporting tool

License

Notifications You must be signed in to change notification settings

TG-Coder101/Lumberjack

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 

Repository files navigation

Lumberjack

A python project for my honours dissertation

image

Description

This is a prototype tool that uses python to identify and exploit vulnerabilities in an Active Directory, then generate reports on the vulnerabilities. This script makes use of Impacket by SecuraAuthPort and the Zerologon exploit developed by Secura

Getting Started

Dependencies

  • Python 3.6 or higher
  • See requirements.txt for additional dependencies

Installation

Run this command after downloading this repository with git clone

pip3 install -r requirements.txt

Executing program

Run this command to view help page

python3 lumberjack.py -h

image

image

Warning: Do not use in a production environment as some of the exploits in the script can cause serious damage to a domain.

Features

  • Active Directory Enumeration
  • Kerberoasting
  • AS-REP Roasting
  • CVE-2020-1472 (Zerologon)
  • Automated Reporting

Acknowledgments

  • SecureAuthCorp
  • Secura
  • CasperGN

About

Lumberjack: An Active Directory vulnerability identification, exploitation, & reporting tool

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages