spyr0-sec

AD_Miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

FullBypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell.

devolutions-labs

Self-contained Hyper-V Active Directory Lab Environment

SharpADWS

Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).

go-secdump

Tool to remotely dump secrets from the Windows registry

SharpRODC

To audit the security of read-only domain controllers

gocheck

Because AV evasion should be easy.

proctools

Small toolkit for extracting information and dumping sensitive strings from Windows processes

ThievingFox

KEV

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

red_team_attack_lab

Red Team Attack Lab for TTP testing & research

InsightEngineering

Hardcore Debugging

PurpleLab

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules, simulate logs, and undertake various security tasks, all accessible through a user-friendly web interface

caOptics

CA Optics - Azure AD Conditional Access Gap Analyzer

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

PkiExtension

nmap-formatter

A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot), sqlite, excel and d2-lang. Simply put it's nmap converter.

ADRecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

SOAPHound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

kunai

Threat-hunting tool for Linux

msi-search

SimpleNTSyscallFuzzer

HEKATOMB

Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.

EventLogCrasher

cloudfoxable

Create your own vulnerable by design AWS penetration testing playground

cve-maker

Tool to find CVEs and Exploits.

F31

Tool for hiding Kali Linux on the network

Invoke-DHCPCheckup

legba

A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

uac-bypass-oneliners

Collection of one-liners to bypass User Account Control (UAC) in Windows. These techniques exploit certain behavior in Windows applications to elevate privileges.