pywhisker
pywhisker copied to clipboard
Python version of the C# tool for "Shadow Credentials" attacks
Hi. Thank you very much for your time writing this tool! I can successfully add shadow credentials when authenticating using a plaintext password but when I try the same using...
It would be awesome to have pipx support for this useful package so it's even easier to deal with python virtual envs. To make it work the `setup.py` or `pyproject.toml`...
Hello, I came across an issue when using the tool with kerberos authentication. Here is the command I used: ```bash python3 pywhisker.py -vv -d domain.intra -u "user" -p 'password' -t...
When i need generate certificate from domainA.contoso.local to target victimuser in domainB.contoso.local. For authentication i use NT hash with this command: `python3 pywhisker.py -a add -d domainA.contoso.local -u admin -H...
Errors persist when executing from pipx. From pipx: ``` pywhisker -d example.com -u example_user -p example_pass --target example_target --action add Traceback (most recent call last): File "/home/kali/.local/share/pipx/venvs/pywhisker/lib/python3.12/site-packages/pywhisker/pywhisker.py", line 819, in...
We had the case where a keycredentiallink could not be deserialized, but needed to be restored after an attack was conducted. This pull request adds checks for if the DeviceId...
Using Kerberos ticket requested from impacket's getTGT fails here, passed in with `-k` and setting KRB5CCNAME: https://github.com/ShutdownRepo/pywhisker/blob/d1704f6de8f59ebbdd9602c8a0e2090a88d1b381/pywhisker/pywhisker.py#L264 ```text AttributeError: 'Ticket' object has no attribute 'from_asn1' ```
fixing #32 as per https://github.com/ShutdownRepo/pywhisker/issues/28#issuecomment-2659123650
added ldap channel binding support. Seems to work properly as expected. Cheers 🍻
Fixes dead links in README