Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

keylistattack.py

Credential Dumping

Credentials & User Impersonation

Impacket's Kerberos Key List attack uses the AES key and number for an RODC-owned krbtgt account to construct an RODC-scoped ticket and send a TGS request containing KERB-KEY-LIST-REQ (padata type 161). It can return a targeted account's long-term secrets, including an NT hash, subject to the RODC reveal policy and KDC support.

Source

https://github.com/realalexandergeorgiev/hackerman/blob/47e56f7eab5b21d19e6e0b82ce4eb73b96c1b1e4/index.html#tool=keylistattack.py

Language

Python

References

github.com github.com github.com github.com learn.microsoft.com

+6 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER