d4rk-d4nph3 / noPac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

noPac

This Fork now supports more encryption schemes (default is now AES256) for better OPSEC and improved usage in cases that the target domain disabled RC4 support.

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter. Yet another low effort domain user to domain admin exploit.

If a Domain Controller is vulnerable it will return a TGT without a PAC, so keep an eye on small size tickets.

Mitigation

Patch your Domain Controllers!

Credits

cube0x0 for the original noPac code

Charlie Clark for his Rubeus fork and Kevin Robertson for SharpMad

About

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.


Languages

Language:C# 100.0%