Releasing PrivHound — Bloodhound collector to model Windows local Privilege Escalation as a graph.
Still early — bugs and PRs welcome.
https://t.co/9MkcK3QdgE
🫡 I’m releasing OAuthBandit a Microsoft OAuth token extraction & validation framework for Red Team and pentesting engagements.
⚠️When users authenticate to Microsoft 365 or Azure, OAuth tokens are cached locally on Windows. In a post-compromise scenario, these tokens can provide direct cloud access without passwords or MFA re-prompt.
OAuthBandit:
* Extracts tokens from multiple local caches
* Decrypts them using legitimate Windows APIs (DPAPI, AES-GCM, CMS)
* Validates permissions, roles, and FOCI exchange potential
* Persistence scenarios (MFA, app registration, mail forwarding)
*automate exfiltration with https://t.co/peit6GACcr
And more…
GitHub: https://t.co/gDoqY5Xe9T
Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack, implemented in C++ and Python https://t.co/AedSDNVUKn