Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

A self-service password management tool for Active Directory

Bloodhound for Blue and Purple Teams

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

The Old BloodHound C# Ingestor (Deprecated)

Make ORMs great again!

Enable drop-in Windows Single Sign On for popular Java web servers.

Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

This cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.

Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.

This module contains DSC resources for deployment and configuration of Active Directory Domain Services.

AD Health Check, Send HTML Email, Ping machines, Encrypt Password,Bulk Password,Microsoft Teams,Monitor Certificate expiry, Monitor cert expiry, AD attributes, IP to Hostname, Export AD group, CSV to SQL,Shutdown, Restart, Local Admin, Disk Space, Account expiry,Restore Permissions, Backup permissions, Delete Files Older Than X-Days, export DHCP…

Active Directory pentesting mind map

Identify the attack paths in BloodHound breaking your AD tiering