RemoteMonologue: Weaponizing DCOM for NTLM authentication coercions

PoC: https://github.com/xforcered/RemoteMonologue

Blog: https://www.ibm.com/think/x-force/remotemonologue-weaponizing-dcom-ntlm-authentication-coercions

#pentest #redteam #ad #creds #lateral

Decrypting Yandex Browser passwords

Soft: https://github.com/Goodies365/YandexDecrypt

@exited3n переписал на python:

Soft: https://github.com/akhomlyuk/Ya_Decrypt

P.S. Yandex Doc: https://yandex.com/support/browser-passwords-crypto/ru/with-master

#creds #pentest #redteam #ad

Tool to decrypt App-Bound encrypted keys in Chrome 127+, using the IElevator COM interface with path validation and encryption protections.

https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption

Как PoC пойдет)

#pentest #redteam #creds