behneyh

PyOxidizer

A modern Python application packaging and distribution tool

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

GOAD

game of active directory

PRET

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

vulnerable-AD

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

Azure-Red-Team

Azure Security Resources and Notes

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

Shhhloader

Syscall Shellcode Loader (Work in Progress)

AD_Miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

ADExplorerSnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

spoofcheck

Simple script that checks a domain for email protections

NetLoader

Loads any C# binary in mem, patching AMSI + ETW.

PSPKIAudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

o365spray

Username enumeration and password spraying tool aimed at Microsoft O365.

Pyramid

a tool to help operate in EDRs' blind spots

Nemesis

An offensive data enrichment pipeline

Evilginx2-Phishlets

Evilginx3 Phishlets version (0.2.3 & above) Only For Testing/Learning Purposes

ADSearch

A tool to help query AD via the LDAP protocol

UAC-BOF-Bonanza

Collection of UAC Bypass Techniques Weaponized as BOFs

adeleg

Active Directory delegation management tool

gocheck

Because AV evasion should be easy.

GamingServiceEoP

Jigsaw

Hide shellcode by shuffling bytes into a random array and reconstruct at runtime

ADeleginator

A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory

WindowsHardeningScript

Some settings stolen from multiple scripts @ZephrFish

Embedder

Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies

Invoke-Pre2kSpray

Enumerate domain machine accounts and perform pre2k password spraying.

XingDumper

Python 3 script to dump/scrape/extract company employees from XING API

BHCEupload

A small go tool to upload JSON files to the BloodHound community edition API