Disclosure: this is just a meme. Please don't actually use this.
This script checks for a few common, easy to leverage vulnerabilites I find testers using to get Domain Administrator access when stealth doesn't matter. This was a joke that turned into a POC, so please don't use this for real. It is more of a fun automation project than something actually useful.
Currently supports:
- SMB relaying
- Kerberoasting
- Null session enumeration
- Cisco Smart Install
- MS17-010
I plan to add more to this as time goes on. The idea here is to provide something that you can easily throw on a Linux box inside a target network while you grab a coffee and it will spit back a few things to try.
Tools needed (it'll check just in case):
ALL AUTOPWN FEATURES ARE UNTESTED AND EXPERIMENTAL!
To Do:
- MS17-010
- Test MS17-010
- Fix MS17-010 scan result parser
- Complete null session tests
- Implement SMB message signing checks as their own function
- Automatic scope generation
- Autopwn? :)