Skip to content

A script that perform a Pre-Auth with a Domain Controller with a given username and a list of hashes

License

Notifications You must be signed in to change notification settings

sator-sdk/HashSpray-DomainController

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 

Repository files navigation

HashSpray-DC

A script that perform a Pre-Auth with a Domain Controller with a given username and a list of hashes

Script still in development but works fine at this stage.

Didn't find that option 1 username and multiple hashes in both CrackMapExec and Impacket so thought could be useful to develop one. Useful when retrieving multiple hashed from miscellaneous sources and whant to test them to pivot or lateral movement.

Important

The option has been merged in both crackmapexec (not supported anymore) and in NXC that is the actively manteined successor.


Tip

That script actually act differently from both previously mentioned solutions, since perform Kerberos Auth and in some restricted environment this actually bypass countermeasures of ban like wail2ban

About

A script that perform a Pre-Auth with a Domain Controller with a given username and a list of hashes

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages