From 097b6f0cc40d074d3083bdedcedcf0603f2cdc8b Mon Sep 17 00:00:00 2001 From: pe3zx Date: Thu, 29 Apr 2021 13:50:22 +0700 Subject: [PATCH] Add: sec-consult/aggrokatz to Credential Access section --- Offensive.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Offensive.md b/Offensive.md index 7af6183..1ebc06d 100644 --- a/Offensive.md +++ b/Offensive.md @@ -972,6 +972,10 @@ Some tools can be categorized in more than one category. But because the current ropnop/kerbrute A tool to perform Kerberos pre-auth bruteforcing + + sec-consult/aggrokatz + Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it to parse LSASS dump files and registry hive files to extract credentials and other secrets stored without downloading the file and without uploading any suspicious code to the beacon. + shantanu561993/SharpLoginPrompt This Program creates a login prompt to gather username and password of the current user. This project allows red team to phish username and password of the current user without touching lsass and having adminitrator credentials on the system.