Skip to content

Releases: portbuster1337/Atlas

Release list

Atlas v1.1.0 - NetExec parity

Atlas v1.1.0 - NetExec parity Latest
Latest

Choose a tag to compare

View all tags
@portbuster1337 portbuster1337 released this 18 Sep 19:13
v1.1.0
aa53fba

NetExec flag compatibility + 30 new modules (44 -> 74), lab-tested on Windows Server 2025 DC.

Highlights:

  • NetExec spellings: --shares/--users/--pass-pol/--rid-brute, -d, -H/--hash, --kdcHost, -M/-o/-L
  • New: smb mmcexec/--generate-tgt/--ntds-less topology, dcsync full --ntds sync, LDAP write ops + real --asreproast/--kerberoasting, Kerberos forge/TGT/S4U, WMI registry/DCOM/EPM, 30 new modules
  • Vendored Titanis synced to trustedsec/Titanis 3012e0d (+3 small patches)

Assets: self-contained win-x64 + linux-x64 builds.

Assets 4
Loading

Atlas v1.0.0

Atlas v1.0.0

Choose a tag to compare

View all tags
@portbuster1337 portbuster1337 released this 01 Sep 16:00
v1.0.0
c544f36

Atlas v1.0.0 – NetExec-style toolkit on Titanis

Atlas is a cross-platform (Windows/Linux) assessment toolkit built on Titanis. It keeps NetExec’s workflow – target lists, credential sets, and [HH:mm:ss] [+] host - message output – while using Titanis for protocol handling.

SMB

  • Shares, users, groups, disks, sessions via SRVS/SAMR
  • SAM/LSA via Remote Registry, file ops over SMB2/3
  • Flags: --pass-pol, --rid-brute, --gen-relay-list, --generate-hosts-file/--generate-krb5-file, --port
  • Execution: -x/--ps via wmiexec (WmiClient) / smbexec (ScmClient Winmgmt_*, auto-deleted)
  • Modules: gpp_password (AES 4e99...), gpp_autologin (Registry.xml), gpp_privileges (GptTmpl.inf), uac/wdigest/runasppl/install_elevated (winreg), spooler (SCM), keepass/rclone/winscp/mremoteng/vnc etc., plus spider/shareaccess/localadmins

LDAP

  • Auth via SASL (-u/-p/-NtlmHash/-AesKey) or simple bind (-bd/-bp)
  • Flags: --users, --active-users, --trusted-for-delegation, --password-not-required, --admin-count, --get-sid, --pass-pol, --dc-list, --gmsa, --groups/--ous/--computers, --find-delegation, --asreproast, --bloodhound (-c/--collection → BloodHound CE JSON + .zip)
  • 24 modules: maq, pre2k, laps, adcs, subnets, daclread, certipy-find, etc.

WMI / Kerberos / DCSync

  • wmi -x whoami or --wmi-query "SELECT * FROM Win32_Process"
  • kerberos user enum / Kerberoasting / Key List (RODC)
  • dcsync via MS-DRSR

Build & size

dotnet build Atlas.sln -p:NoWarn=CS1998
dotnet publish src/Atlas.Cli/Atlas.Cli.csproj -r linux-x64 --self-contained -p:PublishSingleFile=true
  • Atlas.props: InvariantGlobalization true, EnableCompression, DebugType None → 70M Linux ELF / 75M Windows PE32+ self-contained (17M framework-dependent)
  • Tested on Samba AD DC ATLAS.LOCAL 127.0.0.1:389/88/445 – both -u/-p and -bd/-bp work, gpp_password → TestUser:TestPassword123, bloodhound -c All → 47 objects

Binaries

  • atlas-linux-x64 (70M, ELF) / atlas-win-x64.exe (75M, PE32+) – self-contained, no runtime needed

Intended for authorized testing only.

Loading