Skip to content

Latest commit

 

History

History
21 lines (14 loc) · 1.54 KB

README.md

File metadata and controls

21 lines (14 loc) · 1.54 KB

DeathStar

DeathStar

Deathstar is an Empire plugin that is an adaption of DeathStar that automates gaining Domain and/or Enterprise Admin rights in Active Directory environments using common offensive tactics, techniques, and procedures (TTPs).

Motivation

The primary motivation behind the creation of this was to demonstrate how a lot of the commonly exploited Active Directory misconfiguration can be chained together to gain Administrator-level privileges in an automated fashion (akin to a worm).

While many more things could be taken advantage of (including server-side vulnerabilities such as MS17-010), DeathStar mainly focuses on exploiting misconfigurations/vulnerabilities that have a very low probability of causing any system/network stability issues.

Additionally, it now supports Active Directory environments with multiple Forests/Domains. It has an "Active Monitoring" feature, which allows it to adapt its attack path based on real-time changes in the network.

Screenshots

image image

Acknowledgments

This project is built upon DeathStar by byt3bl33d3r