jumptoolkit

jumptoolkit

A collection of dropable biniaries for red teamers

To build

make windows

Jump_ldap_scanner

An ldap scanner that find low hanging fruit:

• Kerberoastable Account
• AS-Reproasting
• Descriptions for users
• Members of High Value groups

TODO

• Add Old Passwords Flag
• Add Support for finding machines with delegate powers
• Better Domain Controller finder (Maybe us Global Catalog flag)
• Add output file
• Detect Computers with laps and groups that can read them.
  • (objectCategory=Computer)(ms-mcs-admpwdexpirationtime=*) - Find-AdmPwdExtendedRight
  • ms-Mcs-AdmPwd - Find-LAPSDelegatedGroups
  • ms-MCS-AdmPwdExpirationTime - Get-LAPSComputers

Jump_Port_scan

A port scanning tool that can be dropped on a victim computer

TODO

• Add output file

Jump_PTR_Lookup

A DNS Bruteforce scanner that does a reverse IP lookup for every IP scanner.

Jump_share_scanner

A SMB Share scanner that can detect read and write permissions from the supplied user.

TODO

• File output
• File Scanning
• Authenticate Via hash
• Lnk,SCF and URL Dropper

IDEAS

Test ADMIN$ read access to test creds <- Kind Detectable.....