diff --git a/Offensive.md b/Offensive.md index ce094cd..8f99b50 100644 --- a/Offensive.md +++ b/Offensive.md @@ -817,6 +817,10 @@ Some tools can be categorized in more than one category. But because the current eladshamir/Whisker Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account. + + eloypgz/certi + Utility to play with ADCS, allows to request tickets and collect information about related objects. Basically, it's the impacket copy of Certify. Thanks to @harmj0y and @tifkin_ for its great work with ADCS. + GhostPack/ForgeCert ForgeCert uses the BouncyCastle C# API and a stolen Certificate Authority (CA) certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory.