Primary Categories: [[Fog]] Links: [[Fog Articles]] / [[Fog CVE's]] / [[Fog Ransom Note]] / [[Fog TTP's]] # [[Fog Tools]] ## Discovery - SharpShares - Quick and dirty binary to list network share information from all machines in the current domain and if they're readable. Can also translate all computer names to ip addresses. - https://github.com/djhohnstein/SharpShares - SoftPerfect NetScan - This fast, highly configurable IPv4/IPv6 scanner can streamline many of your network support procedures. Its well-designed interface, light weight and portability coupled with an extensive range of options and advanced features make SoftPerfect Network Scanner an invaluable tool, whether you are a professional system administrator, someone providing occasional network maintenance, or a general user interested in computer security. - https://www.softperfect.com/products/networkscanner/ ## RMM Tools - AnyDesk - AnyDesk is used for remote desktop access, allowing users to control one computer from another device as if they were physically there. - https://anydesk.com/en ## Credential Theft - DonPAPI - DonPAPI automates secrets dump remotely on multiple Windows computers, with defense evasion in mind. - https://github.com/login-securite/DonPAPI - Veeam-Get-Creds - This repository contains scripts for recovering passwords from the Veeam Backup and Replication credential manager. - https://github.com/sadshade/veeam-creds ## OffSec - Certipy - Certipy is a powerful offensive and defensive toolkit for enumerating and abusing Active Directory Certificate Services (AD CS). It helps red teamers, penetration testers, and defenders assess AD CS misconfigurations - including full support for identifying and exploiting all known ESC1-ESC16 attack paths. - https://github.com/ly4k/Certipy - Impacket - Impacket is an open source collection of modules written in Python for programmatically constructing and manipulating network protocols. Impacket contains several tools for remote service execution, Kerberos manipulation, Windows credential dumping, packet sniffing, and relay attacks. - https://github.com/fortra/impacket - Metasploit - Metasploit is a cybersecurity platform used for penetration testing, which involves identifying and exploiting vulnerabilities to assess security. - https://www.metasploit.com/ - NetExec - NetExec is a network service exploitation tool that helps automate assessing the security of _large_ networks. - https://github.com/Pennyw0rth/NetExec - Orpheus - Orpheus is a wrapper for a modified version of Impacket's GetUserSPNs.py and kerberosv5.py which alters the KDC Options (Ticket Options) and the Encryption Type for Kerberoasting. - https://github.com/trustedsec/orpheus - Sliver - Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver's implants support C2 over Mutual TLS (mTLS), WireGuard, HTTP(S), and DNS and are dynamically compiled with per-binary asymmetric encryption keys. - https://github.com/BishopFox/sliver - Zer0dump - Zer0dump is an PoC exploit/tool for abusing the vulnerabilities associated with CVE-2020-1472 (Zerologon) in order to initiate a full system takeover of an unpatched Windows domain controller. - http://github.com/bb00/zer0dump ## Networking - Powercat - The Power CAT Tools app is your ultimate companion for enhancing your development experience within Microsoft Power Platform. - https://github.com/microsoft/Power-CAT-Tools - Proxychains - ProxyChains is a UNIX program, that hooks network-related libc functions in dynamically linked programs via a preloaded DLL and redirects the connections through SOCKS4a/5 or HTTP proxies. - https://github.com/haad/proxychains ## LOLBAS - PsExec - PsExec is a lightweight telnet replacement that lets users execute processes on other systems (complete with full interactivity for console applications) without having to manually install client software. PsExec's uses include launching interactive command-prompts on remote systems and remote-enabling tools such as IpConfig that otherwise do not have the ability to show information about remote systems. - https://learn.microsoft.com/en-us/sysinternals/downloads/psexec