Skip to content

Instantly share code, notes, and snippets.

@HarmJ0y
Forked from monoxgas/Invoke-DCSync.ps1
Last active February 2, 2021 10:46
Show Gist options
  • Select an option

  • Save HarmJ0y/4ced579bd21db02759a5 to your computer and use it in GitHub Desktop.

Select an option

Save HarmJ0y/4ced579bd21db02759a5 to your computer and use it in GitHub Desktop.

Revisions

  1. HarmJ0y revised this gist Nov 10, 2015. 1 changed file with 2998 additions and 2841 deletions.
    5,839 changes: 2,998 additions & 2,841 deletions Invoke-DCSync.ps1
    2,998 additions, 2,841 deletions not shown because the diff is too large. Please use a local Git client to view these changes.
  2. @monoxgas monoxgas revised this gist Oct 7, 2015. 1 changed file with 100 additions and 3 deletions.
    103 changes: 100 additions & 3 deletions Invoke-DCSync.ps1
    100 additions, 3 deletions not shown because the diff is too large. Please use a local Git client to view these changes.
  3. @monoxgas monoxgas revised this gist Oct 3, 2015. 1 changed file with 5 additions and 2 deletions.
    7 changes: 5 additions & 2 deletions Invoke-DCSync.ps1
    5 additions, 2 deletions not shown because the diff is too large. Please use a local Git client to view these changes.
  4. @monoxgas monoxgas revised this gist Oct 2, 2015. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions Invoke-DCSync.ps1
    2 additions, 2 deletions not shown because the diff is too large. Please use a local Git client to view these changes.
  5. @monoxgas monoxgas revised this gist Oct 2, 2015. 1 changed file with 4 additions and 0 deletions.
    4 changes: 4 additions & 0 deletions Invoke-DCSync.ps1
    Original file line number Diff line number Diff line change
    @@ -355,6 +355,10 @@ Uses dcsync from mimikatz to collect NTLM hashes from the domain.

    Author: @monoxgas

    Invoke-ReflectivePEInjection
    Author: Joe Bialek, Twitter: @JosephBialek
    License: BSD 3-Clause

    .DESCRIPTION

    Uses a mimikatz dll in memory to call dcsync against a domain. By default, it will enumerate all active domain users along with the krbtgt, and print out their current NTLM hash. Big ups to @harmj0y for the powerview project. The Get-NetUser and Get-NetComputer code is ripped for this script.
  6. @monoxgas monoxgas revised this gist Oct 2, 2015. No changes.
  7. @monoxgas monoxgas revised this gist Oct 2, 2015. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion Invoke-DCSync.ps1
    Original file line number Diff line number Diff line change
    @@ -357,7 +357,7 @@ Author: @monoxgas

    .DESCRIPTION

    Uses a custom mimikatz DLL wrapper to call dcsync against a domain. By default, it will enumerate all active domain users along with the krbtgt, and print out their current NTLM hash. Big ups to @harmj0y for the powerview project. The Get-NetUser and Get-NetComputer code is ripped for this script.
    Uses a mimikatz dll in memory to call dcsync against a domain. By default, it will enumerate all active domain users along with the krbtgt, and print out their current NTLM hash. Big ups to @harmj0y for the powerview project. The Get-NetUser and Get-NetComputer code is ripped for this script.

    .PARAMETER Users

  8. @monoxgas monoxgas revised this gist Oct 2, 2015. 1 changed file with 1 addition and 97 deletions.
    98 changes: 1 addition & 97 deletions Invoke-DCSync.ps1
    1 addition, 97 deletions not shown because the diff is too large. Please use a local Git client to view these changes.
  9. @monoxgas monoxgas revised this gist Oct 2, 2015. 1 changed file with 5 additions and 6 deletions.
    11 changes: 5 additions & 6 deletions Invoke-DCSync.ps1
    5 additions, 6 deletions not shown because the diff is too large. Please use a local Git client to view these changes.
  10. @monoxgas monoxgas revised this gist Oct 2, 2015. 1 changed file with 97 additions and 1 deletion.
    98 changes: 97 additions & 1 deletion Invoke-DCSync.ps1
    97 additions, 1 deletion not shown because the diff is too large. Please use a local Git client to view these changes.
  11. @monoxgas monoxgas renamed this gist Oct 2, 2015. 1 changed file with 1 addition and 97 deletions.
    98 changes: 1 addition & 97 deletions gistfile1.txt → Invoke-DCSync.ps1
    1 addition, 97 deletions not shown because the diff is too large. Please use a local Git client to view these changes.
  12. @monoxgas monoxgas created this gist Oct 2, 2015.
    2,938 changes: 2,938 additions & 0 deletions gistfile1.txt
    2,938 additions, 0 deletions not shown because the diff is too large. Please use a local Git client to view these changes.