9.9. 横向移动

文章目录

  • 9.9. 横向移动
    • 9.9.1. 域
    • 9.9.2. Azure AD
    • 9.9.3. Exchange
    • 9.9.4. PowerShell
    • 9.9.5. 内网信息收集
    • 9.9.6. Kerberos

9.9. 横向移动

9.9.1. 域

  • adidnsdump Active Directory Integrated DNS dump tool
  • BloodHound Six Degrees of Domain Admin
  • windapsearch Python script to enumerate users, groups and computers from a Windows domain through LDAP queries
  • ldapdomaindump Active Directory information dumper via LDAP

9.9.2. Azure AD

  • ROADtools Azure AD exploration framework

9.9.3. Exchange

  • ruler A tool to abuse Exchange services
  • MailSniper

9.9.4. PowerShell

  • PowerShellMafia

9.9.5. 内网信息收集

  • SharpShares Quick and dirty binary to list network share information from all machines in the current domain and if they’re readable
  • WinShareEnum Windows Share Enumerator

9.9.6. Kerberos

  • Rubeus
  • kerbrute A tool to perform Kerberos pre-auth bruteforcing

你可能感兴趣的:(Web安全学习笔记)