Accounts

DC-Sonar – Analyzing AD Domains For Security Risks Related To User Accounts

25 Jan 2023 By hackergadgets

DC Sonar Community Repositories The project consists of repositories: dc-sonar-frontend dc-sonar-user-layer dc-sonar-workers-layer ntlm-scrutinizer Disclaimer It’s only for education purposes. Avoid using it on the production Active Directory (AD) domain. Neither contributor incur any responsibility for any using it. Social media Check out our Red Team community Telegram channel Description Architecture For the visual descriptions, openRead More

TeamFiltration – Cross-Platform Framework For Enumerating, Spraying, Exfiltrating, And Backdooring O365 AAD Accounts

11 Nov 2022 By hackergadgets

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts. See the TeamFiltration wiki page for an introduction into how TeamFiltration works and the Quick Start Guide for how to get up and running! This tool has been used internally since January 2021 and was publicly released in my talk “TakingRead More

Blackbird – An OSINT Tool To Search For Accounts By Username In 101 Social Networks

10 Jun 2022 By hackergadgets

Blackbird An OSINT tool to search fast for accounts by username across 101 sites. The Lockheed SR-71 “Blackbird” is a long-range, high-altitude, Mach 3+ strategic reconnaissance aircraft developed and manufactured by the American aerospace company Lockheed Corporation. Disclaimer This or previous program is for Educational purpose ONLY. Do not use it without permission. The usualRead More

Socid-Extractor – Extract Accounts Info From Personal Pages On Various Sites For OSINT Purpose

29 Mar 2022 By hackergadgets

Extract information about a user from profile webpages / API responses and save it in machine-readable format. Usage As a command-line tool: $ socid_extractor –url https://www.deviantart.com/muse1908country: Francecreated_at: 2005-06-16 18:17:41gender: femaleusername: Muse1908website: www.patreon.com/musemercierlinks: [‘https://www.facebook.com/musemercier’, ‘https://www.instagram.com/muse.mercier/’, ‘https://www.patreon.com/musemercier’]tagline: Nothing worth having is easy… Without installing: $ ./run.py –url https://www.deviantart.com/muse1908 As a Python library: >>> import socid_extractor, requests>>> rRead More

Ghostbuster – Eliminate Dangling Elastic IPs By Performing Analysis On Your Resources Within All Your AWS Accounts

19 Mar 2022 By hackergadgets

Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts. Ghostbuster obtains all the DNS records present in all of your AWS accounts (Route53), and can optionally take in records via CSV input, or via Cloudflare. After these records are collected, Ghostbuster iterates through all of your AWS Elastic IPsRead More

Spray365 – Makes Spraying Microsoft Accounts (Office 365 / Azure AD) Easy Through Its Customizable Two-Step Password Spraying Approach

25 Dec 2021 By hackergadgets

Spray365 is a password spraying tool that identifies valid credentials for Microsoft accounts (Office 365 / Azure AD). How is Spray365 different from the many other password spraying tools that are already available? Spray365 enables passwords to be sprayed from an “execution plan”. While having a pre-generated execution plan that describe the spraying operation wellRead More

Toutatis – A Tool That Allows You To Extract Information From Instagrams Accounts Such As E-Mails, Phone Numbers And More

06 Dec 2021 By hackergadgets

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more Prerequisite Python 3 ️ Installation With PyPI pip install toutatis With Github git clone https://github.com/megadose/toutatis.gitcd toutatis/python3 setup.py install  Usage: username -s instagramsessionid “> toutatis -u username -s instagramsessionid  Example Email : [email protected] PublicRead More

ADCSPwn – A Tool To Escalate Privileges In An Active Directory Network By Coercing Authenticate From Machine Accounts And Relaying To The Certificate Service

10 Aug 2021 By

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts (Petitpotam) and relaying to the certificate service. Usage Run ADCSPwn on your target network. authentication will be relayed to. Optional arguments: port – The port ADCSPwn will listen on. remote – Remote machine to trigger authentication from. username –Read More

Profil3r – OSINT Tool That Allows You To Find A Person’S Accounts And Emails + Breached Emails

26 Apr 2021 By

Profil3r is an OSINT tool that allows you to find potential profiles of a person on social networks, as well as their email addresses. This program also alerts you to the presence of a data leak for the found emails. Prerequisite Python 3 Installation git clone https://github.com/Rog3rSm1th/Profil3r.gitcd Profil3r/python3 setup.py install Features Emails Data leaks EmailsRead More

ProtOSINT – A Python Script That Helps You Investigate Protonmail Accounts And ProtonVPN IP Addresses

12 Jan 2021 By

ProtOSINT is a Python script that helps you investigate ProtonMail accounts and ProtonVPN IP addresses. Description This tool can help you in your OSINT investigation on Proton service (for educational purposes only). ProtOSINT is separated in 3 sub-modules: [1] Test the validity of one protonmail account [2] Try to find if your target have aRead More

X