Using a SCF file to Gather Hashes Logo

Using a SCF file to Gather Hashes

0
Free
Visit Website

Have you ever been on an internal network assessment and discovered an unauthenticated writable Windows-based file share? In addition to finding potentially sensitive information, you can abuse this to gather user hashes from users who are browsing the file share. In this attack, a special file with a SCF file extension is placed onto the file share. SCF files can control Windows Explorer, but in this case, we use one to elicit an unsuspecting user to submit their NTLMv1/2 hash to us, the attacker.

FEATURES

ALTERNATIVES

A powerful penetration testing platform for identifying vulnerabilities and weaknesses in computer systems.

A collection of payloads and methodologies for web pentesting.

Tool for randomizing Cobalt Strike Malleable C2 profiles to evade static, signature-based detection controls.

A powerful tool for hiding the true location of your Teamserver, evading detection from Incident Response, redirecting users, blocking specific IP addresses, and managing Malleable C2 traffic in Red Team engagements.

Modular framework for pentesting Modbus protocol with diagnostic and offensive features.

A blog post about bypassing AppLocker using PowerShell diagnostic scripts

A login cracker that can be used to crack many types of authentication protocols.

A comprehensive guide for customizing Cobalt Strike's C2 profiles to enhance stealth and operational security.