active-directory

game of active directory

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

The Network Execution Tool

Investigate malicious Windows logon by visualizing and analyzing Windows event log

PingCastle - Get Active Directory Security at 80% in 20% of the time

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...

Directory Services Internals (DSInternals) PowerShell Module and Framework

Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

Bloodhound Reporting for Blue and Purple Teams

a list of 350+ Free TryHackMe rooms to start learning cybersecurity with THM

Dominate Active Directory with PowerShell.

Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀

A (partial) Python rewriting of PowerSploit's PowerView

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...

Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers

A complete terminal user interface (TUI) for LDAP.

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

Autonomous AI pentesting engine, continuous offensive security across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes and IoT firmware. Agentic reasoning plus real exploit execution deliver proof-based vulnerabilities. Privacy gateway: the LLM never sees your real IPs, hosts or creds, nothing leaves your perimeter.

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications