A swiss army knife for pentesting networks

game of active directory

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

The Network Execution Tool

Investigate malicious Windows logon by visualizing and analyzing Windows event log

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

PingCastle - Get Active Directory Security at 80% in 20% of the time

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

Directory Services Internals (DSInternals) PowerShell Module and Framework

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

Bonobo Git Server for Windows is a web application you can install on your IIS and easily manage and connect to your git repositories. Go to homepage for release and more info.

Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

AD Security Intrusion Detection System

Bloodhound Reporting for Blue and Purple Teams

Red Team Cheatsheet in constant expansion.

RedSnarf is a pen-testing / red-teaming tool for Windows environments

Dominate Active Directory with PowerShell.

Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀

A (partial) Python rewriting of PowerSploit's PowerView

Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...

a list of 350+ Free TryHackMe rooms to start learning cybersecurity with THM

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user