Rob's repositories
Invoke-ADEnum
Automate Active Directory Enumeration
Invoke-SessionHunter
Retrieve and display information about active user sessions on remote computers. No admin privileges required.
SessionExec
Execute commands in other Sessions
Invoke-SMBRemoting
Interactive Shell and Command Execution over Named-Pipes (SMB)
KeyCredentialLink
Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute
Invoke-ShareHunter
Enumerate the Domain for Readable and Writable Shares
Invoke-RunAsSystem
A simple script to elevate current session to SYSTEM (needs to be run as Administrator)
Find-LocalAdminAccess
Check the Domain for Local Admin Access
Invoke-WMIRemoting
Command Execution or Pseudo-Shell over WMI
CheckSMBSigning
Checks for SMB signing disabled on all hosts in the network
Token-Impersonation
Make or Steal a Token
Invoke-GrabTheHash
Get the NTLM Hash for the User or Machine Account TGT held in your current session
Invoke-s4u2self
A tool that abuses s4u2self to gain access to remote hosts
CredsManager
A tool designed for efficient organisation and secure storage of credentials gathered during penetration tests
CheckWebDAVStatus
Check for WebDAV Service Status
Collect-ADObjects
Collect Active Directory Objects
TGT_Monitor
Monitor for TGTs
Validate-Credentials
Validate Domain Credentials
Enum-CertTemplates
Enumerate for and list Certificate Templates
File-Server
A simple TCP file server
Get-DNSRecords
Queries DNS records from the Active Directory domain, specifically from the DNS zones stored in the Active Directory.
Set-DomainObject
Modify or clear a property for a specified active directory object
Ask4Creds
Prompt User for credentials