aas-n / Spraykatz
Licence: mit
Credentials gathering tool automating remote procdump and parse of lsass process.
Stars: ✭ 578
Programming Languages
python
139335 projects - #7 most used programming language
Labels
Projects that are alternatives of or similar to Spraykatz
secret-service
Service to keep secrets of applications
Stars: ✭ 56 (-90.31%)
Mutual labels: credentials
webextension
Detect secrets in your request/response using secretlint.
Stars: ✭ 40 (-93.08%)
Mutual labels: credentials
Scavenger
Crawler (Bot) searching for credential leaks on different paste sites.
Stars: ✭ 347 (-39.97%)
Mutual labels: credentials
kubernetes-credentials-plugin
Credential classes to access Kubernetes clusters
Stars: ✭ 15 (-97.4%)
Mutual labels: credentials
pyark
CyberArk Enterprise Password Vault API CLI tool
Stars: ✭ 25 (-95.67%)
Mutual labels: credentials
MirrorDump
Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory
Stars: ✭ 197 (-65.92%)
Mutual labels: credentials
SILVERDUMP
A wrapping script to query the default password list maintained by cirn.net... << Thank them.
Stars: ✭ 24 (-95.85%)
Mutual labels: credentials
pscale-workflow-helper-scripts
Workflows and helper scripts around the PlanetScale DB workflow to automate database branch creation, association, update and merge directly out of your pull/merge request or favourite CI/CD.
Stars: ✭ 42 (-92.73%)
Mutual labels: credentials
macaroons-rs
Macaroons: bearer credentials with caveats for distributed authorization
Stars: ✭ 62 (-89.27%)
Mutual labels: credentials
IMAPLoginTester
A simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to login on IMAP servers.
Stars: ✭ 47 (-91.87%)
Mutual labels: credentials
vault-token-helper
@hashicorp Vault Token Helper for macOS, Linux and Windows with support for secure token storage and multiple Vault servers 🔐
Stars: ✭ 74 (-87.2%)
Mutual labels: credentials
Industrial-Security-Auditing-Framework
ISAF aims to be a framework that provides the necessary tools for the correct security audit of industrial environments. This repo is a mirror of https://gitlab.com/d0ubl3g/industrial-security-auditing-framework.
Stars: ✭ 43 (-92.56%)
Mutual labels: credentials
windows-Credential-Provider-library
This repository will be updated with all the examples and links that I can find with relevant knowledge & information about CP in MS Windows vista up to version 10.
Stars: ✭ 122 (-78.89%)
Mutual labels: credentials
Aws Vault
A vault for securely storing and accessing AWS credentials in development environments
Stars: ✭ 5,626 (+873.36%)
Mutual labels: credentials
Rtspallthethings
Deprecated RTSP media server -- Use github.com/aler9/rtsp-simple-server instead.
Stars: ✭ 258 (-55.36%)
Mutual labels: credentials
Spraykatz
Spray love around the world
Index
| Title | Description |
|---|---|
| About | Brief Description about the tool |
| Installation | Installation and Requirements |
| Usage | How to use Spraykatz |
| Changelog | Spraykatz changelog |
| Acknowlegments | Acknowlegments |
About
Spraykatz is a tool without any pretention able to retrieve credentials on Windows machines and large Active Directory environments.
It simply tries to procdump machines and parse dumps remotely in order to avoid detections by antivirus softwares as much as possible.
Installation
This tool is written for python3 to python3.6. Do not use this on production environments!
Ubuntu
On a fresh updated Ubuntu.
apt update
apt install -y python3.6 python3-pip git nmap
git clone https://github.com/aas-n/spraykatz.git
cd spraykatz
pip3 install -r requirements.txt
Using Spraykatz
A quick start could be:
./spraykatz.py -u H4x0r -p L0c4L4dm1n -t 192.168.1.0/24
Mandatory arguments
| Switches | Description |
|---|---|
| -u, --username | User to spray with. He must have admin rights on targeted systems in order to gain remote code execution. |
| -p, --password | User's password or NTLM hash in the LM:NT format. |
| -t, --targets | IP addresses and/or IP address ranges. You can submit them via a file of targets (one target per line), or inline (separated by commas). |
Optional arguments
| Switches | Description |
|---|---|
| -d, --domain | User's domain. If he is not member of a domain, simply use -d . instead. |
| -r, --remove | Only try to clean up ProcDump and dumps left behind on distant machines. Just in case. |
| -v, --verbosity | Verbosity mode {warning, info, debug}. Default == info. |
| -w, --wait | How many seconds Spraykatz waits before exiting gracefully. Default is 180 seconds. |
Changelog
Version 0.9.9
=============
- Removing impacket submodules (just use pip).
Version 0.9.8
=============
- ProcDump binaries are not embedded anymore. Spraykatz ask for downloading them now.
Version 0.9.7
=============
- adding the "-r" switch to remove procdump & dumps left behind, just in case.
- adding the "-w" switch to specify a timeout before exiting gracefully.
- Debug mode enhanced
- Bugs fixes
Acknowlegments
Spraykatz uses slighlty modified parts of the following projects:
Thanks:
Written by aas
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].