A swiss army knife for pentesting networks

game of active directory

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

The Network Execution Tool

Investigate malicious Windows logon by visualizing and analyzing Windows event log

PingCastle - Get Active Directory Security at 80% in 20% of the time

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...

Directory Services Internals (DSInternals) PowerShell Module and Framework

Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Bonobo Git Server for Windows is a web application you can install on your IIS and easily manage and connect to your git repositories. Go to homepage for release and more info.

Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.