Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

A self-service password management tool for Active Directory

Enable drop-in Windows Single Sign On for popular Java web servers.

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

This module contains DSC resources for deployment and configuration of Active Directory Domain Services.

The Old BloodHound C# Ingestor (Deprecated)

Bloodhound Reporting for Blue and Purple Teams

AD Health Check, Send HTML Email, Ping machines, Encrypt Password,Bulk Password,Microsoft Teams,Monitor Certificate expiry, Monitor cert expiry, AD attributes, IP to Hostname, Export AD group, CSV to SQL,Shutdown, Restart, Local Admin, Disk Space, Account expiry,Restore Permissions, Backup permissions, Delete Files Older Than X-Days, export DHCP…

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

🔴 Curso GRÁTIS SAMBA 4 Level 2 - REPOSITÓRIO CONGELADO - Esse repositório não irá mais receber atualizações.

This cheat sheet outlines common enumeration and attack methods for Windows Active Directory using PowerShell.

Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

🔴 Curso GRÁTIS SAMBA 4 Level 1 REPOSITÓRIO CONGELADO - Esse repositório não irá mais receber atualizações.

This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.

IdentityServer4 Ldap Extension (OpenLdap or ActiveDirectory)

Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.

PowerShell Administration scripts

Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.