KrbRelayUp | fix local privilege escalation in windows

by Dec0ne C# Version: Current License: No License

X-Ray Key Features Code Snippets Community Discussions Vulnerabilities Install Support

kandi X-RAY | KrbRelayUp Summary

KrbRelayUp is a C# library. KrbRelayUp has no bugs, it has no vulnerabilities and it has medium support. You can download it from GitHub.

Simple wrapper around some of the features of Rubeus and KrbRelay (and a few other honorable mentions in the acknowledgements section) in order to streamline the abuse of the following attack primitive:. UPDATE: Here is an excellent writeup by @an0n_r0 on how to perform this attack manually (using the original tools for this attack path: PowerMad/SharpMad, KrbRelay, Rubeus and SCMUACBypass).

Support

Quality

Security

License

Reuse

Support

KrbRelayUp has a medium active ecosystem.

It has 1303 star(s) with 176 fork(s). There are 22 watchers for this library.

It had no major release in the last 6 months.

There are 16 open issues and 5 have been closed. On average issues are closed in 6 days. There are 1 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of KrbRelayUp is current.

Quality

KrbRelayUp has no bugs reported.

Security

KrbRelayUp has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

License

KrbRelayUp does not have a standard license declared.

Check the repository for any license declaration and review the terms closely.

Without a license, all rights are reserved, and you cannot use the library in your applications.

Reuse

KrbRelayUp releases are not available. You will need to build from source code and install.

Installation instructions are not available. Examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of KrbRelayUp

Get all kandi verified functions for this library.

KrbRelayUp Key Features

No Key Features are available at this moment for KrbRelayUp.

KrbRelayUp Examples and Code Snippets

No Code Snippets are available at this moment for KrbRelayUp.

Community Discussions

No Community Discussions are available at this moment for KrbRelayUp.Refer to stack overflow page for discussions.

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install KrbRelayUp

You can download it from GitHub.

Support

I added some features to support this attack primitive using shadow credentials. Note this eliminates the need for adding (or owning) another machine account. Note: this attack method bypasses the Protected Users (or 'Account is sensitive and cannot be delegated') mitigation due to the S4U2Self abuse. UPDATE: Here is an excellent writeup by @icyguider on how to perform the ShadowCred method of this attack manually (using the original tools for this attack path: KrbRelay, Rubeus and SCMUACBypass) along with the usage of NimCrypt2 to pack the various tools and evade some detection by defensive mechanism.

Find more information at: