Skip to content

Deathstar is an Empire plugin that automates gaining Domain and/or Enterprise Admin rights in Active Directory environments using common offensive tactics, techniques, and procedures (TTPs).

License

Notifications You must be signed in to change notification settings

BC-SECURITY/DeathStarPlugin

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

DeathStar

DeathStar

Deathstar is an Empire plugin that is an adaption of DeathStar that automates gaining Domain and/or Enterprise Admin rights in Active Directory environments using common offensive tactics, techniques, and procedures (TTPs).

Motivation

The primary motivation behind the creation of this was to demonstrate how a lot of the commonly exploited Active Directory misconfiguration can be chained together to gain Administrator-level privileges in an automated fashion (akin to a worm).

While many more things could be taken advantage of (including server-side vulnerabilities such as MS17-010), DeathStar mainly focuses on exploiting misconfigurations/vulnerabilities that have a very low probability of causing any system/network stability issues.

Additionally, it now supports Active Directory environments with multiple Forests/Domains. It has an "Active Monitoring" feature, which allows it to adapt its attack path based on real-time changes in the network.

Screenshots

image image

Acknowledgments

This project is built upon DeathStar by byt3bl33d3r

About

Deathstar is an Empire plugin that automates gaining Domain and/or Enterprise Admin rights in Active Directory environments using common offensive tactics, techniques, and procedures (TTPs).

Resources

License

Stars

Watchers

Forks

Sponsor this project

 

Packages

No packages published

Languages