Skip to content

Latest commit

 

History

History
42 lines (26 loc) · 2.11 KB

README.md

File metadata and controls

42 lines (26 loc) · 2.11 KB

CTF toolBox

PowerShell & Python tools developed for CTFs and certification exams

(Too lazy to keep maintaining these scripts for long, feel free to edit/fix/customize as you please)


certInfo.ps1: Displays information about a cert file

certInfo


Invoke-DomainEnumeration.(ps1|py): Domain enumeration in PS & Python. PS version works without any extra modules, Python version needs LDAP3.
(Only the PS version will display potential RBCD abuse, parsing ACLs in python was a royal pain in the ass.)

Screenshot 2025-01-16 010944 Screenshot 2025-01-16 010833 1736805654826 1736805654777 1736805654767


Invoke-NewGPO.ps1: Creates a new empty GPO and links it to the target OU, assuming you have enough privileges. (works like a charm with membership in Group Policy Creator Owners or anything equally powerful). Keep in mind that you still need privilege to link the GPO. Linking GPOs is an OU-specific permission, creating GPOs is a domain wide permission.

1736274316707


Read-FileWithSeBackupPrivilege: Uses SeBackupPrivilege to read files/flags.

1735424866984

Copy-FileWithSeBackupPrivilege: Uses SeBackupPrivilege to copy files.

image


raiseChild.ps1: PowerShell version of Impacket's raiseChild.py - automates Child domain -> Parent domain compromise.

image