diff --git a/Offensive.md b/Offensive.md index 0f7e8ca..d812354 100644 --- a/Offensive.md +++ b/Offensive.md @@ -777,6 +777,10 @@ Some tools can be categorized in more than one category. But because the current eladshamir/Whisker Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account. + + GhostPack/ForgeCert + ForgeCert uses the BouncyCastle C# API and a stolen Certificate Authority (CA) certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. + GoSecure/WSuspicious WSuspicious - A tool to abuse insecure WSUS connections for privilege escalationsWSuspicious - A tool to abuse insecure WSUS connections for privilege escalations