Active-Directory

Tools which we need for AD Enum and escalating it

1. PowerView/SharpView :-
2. BlodHound :- GUI to get more details about the users and how to enumerate further
3. SharpHound :- GUI to get more details about the users and how to enumerate further
4. BloodHound.py :- Python version for BloodHound
5. Kerbrute :- Written in Go that uses Kerberos Pre-Authentication to enumerate Active Directory accounts, perform password spraying, and brute-forcing.
6. Impacket toolkit :- Tools written in Python for interacting with network protocols. The suite of tools contains various scripts for enumerating and attacking Active Directory.
7. Responder :- Responder is a purpose-built tool to poison LLMNR, NBT-NS, and MDNS, with many different functions.
8. Inveigh.ps1 :- PowerShell tool for performing various network spoofing and poisoning attacks.
9. C# Inveigh (InveighZero) :- The C# version of Inveigh with a semi-interactive console for interacting with captured data such as username and password hashes
10. rpcinfo
11. rpcclient
12. CrackMapExec (CME)
13. Rubeus
14. GetUserSPNs.py
15. Hashcat
16. enum4linux
17. enum4linux-ng
18. ldapsearch
19. windapsearch
20. DomainPasswordSpray.ps1
21. LAPSToolkit
22. smbmap
23. psexec.py
24. wmiexec.py
25. Snaffler
26. smbserver.py
27. setspn.exe
28. Mimikatz
29. secretsdump.py
30. evil-winrm
31. mssqlclient.py
32. noPac.py
33. rpcdump.py
34. CVE-2021-1675.py
35. ntlmrelayx.py
36. PetitPotam.py
37. gettgtpkinit.py
38. getnthash.py
39. adidnsdump
40. gpp-decrypt
41. GetNPUsers.py
42. lookupsid.py
43. ticketer.py
44. raiseChild.py
45. Active Directory Explorer
46. PingCastle
47. Group3r
48. ADRecon