[addtool] jackdaw

[gwen001]

[homepage]https://github.com/skelsec/jackdaw[/homepage] [tags]domains,windows,passwords,hash,usernames,activedirectory[/tags] [short_descr]Gather gather gather.[/short_descr] [long_descr]Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy feature to help you in a password-cracking project by storing/looking up/reporting hashes/passwords/users.

Features:

• Data acquisition via: LDAP, SMB, Kerberos, LSASS dumps, DCSYNC results, manual upload.
• Graph: the framework can generate a graph using the available information in the database and plot it via the web UI (nest).
• Anomalies detection: the framework can identify common AD misconfigurations without graph generation.
• Password cracking: the framework does not performing any cracking, only organizing the hashes and the cracking results.
• Database backend.
• Web UI written in React.[/long_descr] [image]https://raw.githubusercontent.com/gwen001/offsectools_www/main/af1b8bddfee50c33053db06c71d3c920.jpeg[/image]

[gwen001]

Issue correctly handled, tool is waiting for human validation.

[gwen001]

Tool has been accepted by the team: https://offsec.tools/tool/jackdaw

Thank you for your contribution!