diff --git a/README.md b/README.md index 2f7fe9a..1a27772 100644 --- a/README.md +++ b/README.md @@ -5,12 +5,12 @@ [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/13512/badge)](https://www.bestpractices.dev/projects/13512) [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/JVBotelho/skewrun/badge)](https://securityscorecards.dev/viewer/?uri=github.com/JVBotelho/skewrun) -![skewrun demo](https://raw.githubusercontent.com/JVBotelho/skewrun/main/assets/demo.gif) - `skewrun` is an Active Directory time discovery toolkit for red teams. It dynamically resolves the Domain Controller's time via network protocols (CLDAP, SMB, NTP, Kerberos, NTLM) and executes commands via `libfaketime` (`LD_PRELOAD`), tricking the executed binary into using the exact DC time. This solves the Kerberos `KRB_AP_ERR_SKEW` (Clock Skew Too Great) error, allowing you to run tools like Impacket or NetExec from a Linux attack machine whose clock is heavily desynchronized from the target Windows domain, **without requiring root privileges to change the system time**. +![skewrun demo](https://raw.githubusercontent.com/JVBotelho/skewrun/main/assets/demo.gif) + ## Architecture: Library-First Starting with `v0.9.0`, Skewrun is built as a library-first architecture: diff --git a/assets/demo.gif b/assets/demo.gif index eb89a9b..ca1444a 100644 Binary files a/assets/demo.gif and b/assets/demo.gif differ