Friday, August 28, 2020

SharpHose - Asynchronous Password Spraying Tool In C# For Windows Environments


SharpHose is a C# password spraying tool designed to be fast, safe, and usable over Cobalt Strike's execute-assembly. It provides a flexible way to interact with Active Directory using domain-joined and non-joined contexts, while also being able to target specific domains and domain controllers. SharpHose takes into consideration the domain password policy, including fine grained password policies, in an attempt to avoid account lockouts. Fine grained password policies are enumerated for the users and groups that that the policy applies to. If the policy applied also to groups, the group users are captured. All enabled domain users are then classified according to their password policies, in order of precedence, and marked as safe or unsafe. The remaining users are filtered against an optional user-supplied exclude list.
Besides just spraying, red team operators can view all of the password policies for a domain, all the users affected by the policy, or just view the enabled domain users. Output can be sent directly to the console or to a user-supplied output folder.
Follow me on Twitter for some more tool releases soon! @ustayready

Nozzles
Nozzles are built-in methods of spraying. While currently only supporting one Nozzle (LDAP), it's written in a way that makes it easily extendable.

LDAP
Active Directory spraying nozzle using the LDAP protocol
  • Asynchronous spraying for faster, but not too fast, results
  • Domain joined and non-joined spraying
  • Tight integration w/ domain password policies and fine grained password policies
  • Smart lockout prevention (lockoutThreshold n-1 just to be safe)
  • Optionally spray to specific domains and domain controllers
  • View password policies and the affected users

Coming soon!
  • MSOL
  • OWA/EWS
  • Lync

Compilation
  • Built using Visual Studio 2019 Community Edition
  • .NET Framework 4.5

Usage Examples
Cobalt Strike Users
Be sure to use the --auto to avoid the interactive prompts in SharpHose. Also, prepare your arguments locally so you can read the description before running. If you don't pass any arguments over execute-assembly, then SharpHose throws a "Missing Argument Exception" and Cobalt Strike won't return any output. You will know this is happening when you see [-] Invoke_3 on EntryPoint failed. This will be fixed eventually.
Domain Joined Spray w/o Interaction SharpHose.exe --action SPRAY_USERS --spraypassword Spring2020! --output c:\temp\ --auto
Domain Joined Spray w/ Exclusions SharpHose.exe --action SPRAY_USERS --spraypassword Spring2020! --output c:\temp\ --exclude c:\temp\exclusion_list.txt
Non-Domain Joined Spray SharpHose.exe --action SPRAY_USERS --spraypassword Spring2020! --domain lab.local --username demo --password DemoThePlanet --output c:\temp\
Domain Joined Show Policies Active Directory stores durations in negative large integer values which need to lapse after the last lockoutThreshold is exceeded. In future versions these will be formatted cleaner. SharpHose.exe --action GET_POLICIES --output c:\temp\
Domain Joined Show Policy Users SharpHose.exe --action GET_POLICY_USERS --policy lab --output c:\temp\
Domain Joined Show All Users SharpHose.exe --action GET_ENABLED_USERS --output c:\temp\
Domain Joined Spray Using Cobalt Strike execute-assembly /path/to/SharpHose.exe --action SPRAY_USERS --spraypassword Spring2020! --output c:\temp\ --auto

Shout-Outs




via KitPloitRelated articles
  1. Free Pentest Tools For Windows
  2. Pentest Box Tools Download
  3. Pentest Tools Subdomain
  4. How To Hack
  5. Hacker Tools Free Download
  6. Hacking Tools Usb
  7. Hak5 Tools
  8. What Are Hacking Tools
  9. Pentest Tools For Mac
  10. Pentest Tools Nmap
  11. Pentest Box Tools Download
  12. Hacking Tools Free Download
  13. Hacking Tools Usb
  14. Physical Pentest Tools
  15. Pentest Tools Kali Linux
  16. Hacker Tools Windows
  17. Hack Tools 2019
  18. Pentest Recon Tools
  19. Best Hacking Tools 2019
  20. Hacking Tools For Mac
  21. Hacking Tools And Software
  22. Hacks And Tools
  23. Hack Tools Download
  24. Easy Hack Tools
  25. Hack Apps
  26. Hacker Tools Free
  27. Hack App
  28. Hacking Apps
  29. Hack Website Online Tool
  30. Hak5 Tools
  31. Hacker Tools Software
  32. Hack Tools
  33. Underground Hacker Sites
  34. Hacker Tools 2019
  35. Hacking App
  36. Pentest Automation Tools
  37. How To Install Pentest Tools In Ubuntu
  38. Best Pentesting Tools 2018
  39. Hack Tools
  40. Pentest Tools Alternative
  41. Hacking Tools Kit
  42. Hack Tools Mac
  43. Pentest Tools Android
  44. Tools For Hacker
  45. Pentest Tools Android
  46. Underground Hacker Sites
  47. Hack Tools For Mac
  48. Hacking Tools
  49. Hacking Tools Usb
  50. Hacker Search Tools
  51. Hack Tools Download
  52. Hacker Tools For Windows
  53. Best Hacking Tools 2020
  54. Pentest Tools Linux
  55. Install Pentest Tools Ubuntu
  56. How To Hack
  57. Hacking Tools For Kali Linux
  58. Hacker Security Tools
  59. Pentest Tools List
  60. Pentest Tools Linux
  61. Hacking Tools For Mac
  62. Hack And Tools
  63. Hack Rom Tools
  64. Hacks And Tools
  65. Pentest Tools Windows
  66. Tools Used For Hacking
  67. Pentest Box Tools Download
  68. Hacking Tools For Kali Linux
  69. Blackhat Hacker Tools
  70. Pentest Tools Kali Linux
  71. Hack Apps
  72. Wifi Hacker Tools For Windows
  73. Hacker Tools Hardware
  74. Hacking Tools Hardware
  75. Pentest Tools Website Vulnerability
  76. New Hack Tools
  77. Best Hacking Tools 2019
  78. Hacking Tools For Windows 7
  79. Easy Hack Tools
  80. How To Make Hacking Tools
  81. Hack Tools For Windows
  82. Nsa Hack Tools Download
  83. Pentest Recon Tools
  84. Hacker Tools For Mac
  85. Hacker Tools Windows
  86. Hacker Tools
  87. New Hack Tools
  88. Hacking Tools Hardware
  89. Pentest Tools Alternative
  90. Pentest Tools Github
  91. Android Hack Tools Github
  92. Hack Tools For Windows
  93. Pentest Tools
  94. Top Pentest Tools
  95. Hacker Hardware Tools
  96. Top Pentest Tools
  97. Hacker Search Tools
  98. Hack Tools
  99. Hacker Tools 2020
  100. Hack Tools For Pc
  101. Hack Tools 2019
  102. Pentest Tools For Ubuntu
  103. Pentest Recon Tools
  104. Termux Hacking Tools 2019
  105. Hacker Search Tools
  106. Growth Hacker Tools
  107. Pentest Tools
  108. Pentest Tools Subdomain
  109. Growth Hacker Tools
  110. Pentest Tools Website
  111. Kik Hack Tools
  112. Best Pentesting Tools 2018
  113. Pentest Tools Apk
  114. Hacker Tools Free
  115. Hack Tools For Windows
  116. Black Hat Hacker Tools
  117. Hacker Tools 2020
  118. Pentest Tools Url Fuzzer
  119. Hacker Tools Apk
  120. Pentest Tools Kali Linux
  121. Pentest Tools Alternative
  122. Nsa Hack Tools
  123. Hack Tools
  124. Tools For Hacker
  125. Best Hacking Tools 2019
  126. Hacker Tools For Ios
  127. Hacking Tools 2020
  128. Nsa Hacker Tools
  129. New Hack Tools
  130. Pentest Tools Open Source
  131. Hacker Tools 2020
  132. Hacker Tools Software
  133. Hack Tools Pc
  134. How To Hack
  135. Nsa Hack Tools Download
  136. Nsa Hack Tools Download
  137. Top Pentest Tools
  138. Nsa Hack Tools
  139. Hacker Tools Apk Download
  140. Hacker Hardware Tools
  141. Hacking Tools Free Download
  142. Pentest Tools Url Fuzzer
  143. Pentest Tools Nmap
  144. Hacking Tools Hardware
  145. Hack Tools For Games
  146. Pentest Tools Subdomain
  147. What Are Hacking Tools
  148. Pentest Tools Nmap
  149. Best Hacking Tools 2019
  150. Pentest Tools Review
  151. Hackrf Tools
  152. Github Hacking Tools
  153. Ethical Hacker Tools
  154. Hack Tools
  155. Hacking Tools Windows
  156. Free Pentest Tools For Windows
  157. Hacking Tools For Windows
  158. Hacker Tools Hardware
  159. Hacker Hardware Tools

No comments:

Post a Comment