{"id":2322,"date":"2020-03-28T19:29:17","date_gmt":"2020-03-28T17:29:17","guid":{"rendered":"https:\/\/www.identitycosmos.com\/?p=2322"},"modified":"2020-03-28T19:29:17","modified_gmt":"2020-03-28T17:29:17","slug":"spraykatz-a-fantastic-tool-for-blueteam-or-redteam-who-want-to-evaluate-lateral-movement-or-privilege-escalation-weakness-on-active-directory-environments","status":"publish","type":"post","link":"https:\/\/identitycosmos.com\/index.php\/2020\/03\/28\/spraykatz-a-fantastic-tool-for-blueteam-or-redteam-who-want-to-evaluate-lateral-movement-or-privilege-escalation-weakness-on-active-directory-environments\/","title":{"rendered":"Spraykatz : a fantastic tool for Blueteam or Redteam who want to evaluate lateral movement or privilege escalation weakness on Active Directory environments"},"content":{"rendered":"

\"\"<\/p>\n

Introduction to Spraykatz<\/h1>\n

As you may know, password hash dump is a very useful method to perform lateral movement or privilege escalation on a network. If you are using Active Directory, this method will be used by a lot of modern malware which include some code pieces from very known security tools like Mimikatz for example.<\/p>\n

In this article, we will explorer Spraykatz (v0.9.6) a magnificent tool written by @lydericlefebvre which can help in different situations:<\/p>\n