Amnesiac: lateral movement within active directory environments
Amnesiac
Amnesiac is a post-exploitation framework designed to assist with lateral movement within active directory environments.
Amnesiac is being developed to bridge a gap on Windows OS, where post-exploitation frameworks are not readily available unless explicitly installed. It is entirely written in PowerShell and can be loaded and executed in memory, just like any other PowerShell script.
Key Features
Command Execution over Named-Pipes (SMB)
Amnesiac sends commands and receives outputs through Named Pipes, ensuring discreet and efficient post-exploitation activities.
No Installation Required
Unlike traditional frameworks, Amnesiac does not require installation. It operates entirely in memory, reducing the risk of detection and forensic footprint.
User-Friendly Framework
Amnesiac is designed with usability in mind. It provides a user-friendly interface, making it accessible and efficient for both beginners and experienced users.
Versatile Post-Exploitation Modules
Amnesiac comes equipped with an array of post-exploitation modules, ranging from keyloggers to Kerberos ticket-dumping tools. These modules can be seamlessly integrated into your testing and assessment workflows.
Acknowledgments
Amnesiac relies on a few other projects for its modules. In each module, you’ll find reference link information, ensuring proper attribution to the original creators.
Install & Use
Copyright (c) 2023, Rob
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
