DeathStar

A tool for automating the entire process of becoming DA. The flowchart made by byt3bl33d3r pretty much goes through each step you would normally do manually and works with harvested credentials to try to gain access. byt3bl33d3r has documented it on his Github.

Automating Mimikatz with Empire and DeathStarStealthbits Technologies

GitHub - byt3bl33d3r/DeathStar: Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.GitHub

Basically, you run the NTLMrelay attack from the previous step, but with Empire set up with a REST API. Then you just run DeathStar, grab a coffee and come back as Domain Admin. Congratulations: you are now Darth Sidious.

Note: I have had some trouble making DeathStar and Empire cooperate. There's a little explanation of why in the DeathStar Github page. Hopefully, it will be stable soon.

Useful links

Automating Mimikatz with Empire and DeathStarStealthbits Technologies