KCMTicketFormatter

This tools takes the output from https://github.com/fireeye/SSSDKCMExtractor and turns it into properly formatted CCACHE files for use with Windows systems.

KCMTicketFormatter integrates with https://github.com/fireeye/SSSDKCMExtractor. It takes a payload from the output of the tool and converts it to a properly-formatted CCACHE file.

Requirements:

Output from https://github.com/fireeye/SSSDKCMExtractor
A working Python3 environment

Usage:

To properly format your input, copy the payload from the SSSDKCMExtractor and paste it into a text file. You will provide this file to the tool with the -f flag.


usage: KCMTicketFormatter.py [-h] -f FILE [-o OUTPUT] [-v]

Format SSSD Raw Kerberos Payloads into CCACHE files for use on Windows systems.

optional arguments:
  -h, --help            show this help message and exit
  -f FILE, --file FILE  <Required> Specify path to the file containing SSSD Raw Kerberos Payload
  -o OUTPUT, --output OUTPUT
                        Specify name of file to output the ccache. Defaults to ticket.ccache
  -v, --verbose         Show debugging messages

Example:

python3 KCMTicketFormatter.py -f payload.txt -o user.ccache

Format SSSD Raw Kerberos Payloads into CCACHE files for use on Windows systems

Related tags

Overview

KCMTicketFormatter

This tools takes the output from https://github.com/fireeye/SSSDKCMExtractor and turns it into properly formatted CCACHE files for use with Windows systems.

Requirements:

Usage:

Owner

Black Lantern Security

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Scans all drives for log4j jar files and gets their version from the manifest

Writeups for wtf-CTF hosted by Manipal Information Security Team as part of Techweek2021- INCOGNITO

proxyshell payload generate

Program that mathematically generates and validates CPF numbers

:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP Server)

Mass Check Vulnerable Log4j CVE-2021-44228

Mad Spammer is a python webhook spammer which is very easy and safe to use.

Hashpic - Hashpic creates an image from a MD5 or SHA512 hash

ssh-audit is a tool for ssh server & client configuration auditing.

Search Shodan for Minecraft server IPs to grief

Burp Suite extension for encoding/decoding EVM calldata

Polkit - Local Privilege Escalation (CVE-2021-3560)

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

A Modified version of TCC's Osprey poc framework......

A quick script to spot the usage of Unicode Bidi (bidirectional) characters that could lead to an Invisible Backdoor

Uma ferramenta de segurança da informação escrita em python3,capaz de dar acesso total ao computador de alguém!

HashDB API hash lookup plugin for IDA Pro

Malware for Discord, designed to steal passwords, tokens, and inject discord folders for long-term use.

client attack remotely , this script was written for educational purposes only