active-directory

A swiss army knife for pentesting networks

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Bonobo Git Server for Windows is a web application you can install on your IIS and easily manage and connect to your git repositories. Go to homepage for release and more info.

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2019, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

PingCastle - Get Active Directory Security at 80% in 20% of the time

RedSnarf is a pen-testing / red-teaming tool for Windows environments

Directory Services Internals (DSInternals) PowerShell Module and Framework

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Modern tactical exploitation toolkit.

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

Bloodhound for Blue and Purple Teams

Active Directory ACL Visualizer and Explorer - who's really Domain Admin?

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

Building an Active Directory domain and hacking it

Provision a brand-new company with proper defaults in Windows, Offic365, and Azure

OpenAM is an open access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security.

Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers

A (partial) Python rewriting of PowerSploit's PowerView

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

👔 Enterprise Web application starter kit or template using Laravel

A Kerberos implementation built entirely in managed code.

Timeline of Active Directory changes with replication metadata