PyWhisker

pyWhisker is a tool allowing users to manipulate the msDS-KeyCredentialLink attribute of a target user/computer to obtain full control over that object. It's based on Impacket and on our Python equivalent of Michael Grafnetter's DSInternals called PyDSInternals. This tool, along with Dirk-jan's PKINITtools allow for a complete primitive exploitation on UNIX-based systems only. Command Reference: Target IP: 10.10.10.1 Domain: test.local Username: john Password: password123

python3 pywhisker.py -d "test.local" -u "john" -p "password123" --target "user2" --action "list" --dc-ip "10.10.10.1"

Native

Exploitation

Requires

Password, Username

Services

Kerberos

Refs

github.com/shutdownrepo/pywhisker