tmp63498,github

adlab

Active Directory Lab for Penetration Testing

allthethingsexec

Executes Blended Managed/Unmanged Exports

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

backupoperatortoda

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bloodhound-quickwin

Simple script to extract useful informations from the combo BloodHound + Neo4j

bloodyad

BloodyAD is an Active Directory Privilege Escalation Framework

bruteforce-database

Bruteforce database

burp-lfi-tests

Fuzzing for LFI using Burpsuite

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

candypotato

Pure C++, weaponized, fully automated implementation of RottenPotatoNG

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

concealed_position

Bring your own print driver privilege escalation tool

cook

A powerful wordlist generator, updater & saver, and payload builder.

crackmapexec

A swiss army knife for pentesting networks

crypton

Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Key Exchange, Authentication methods along with example challenges from CTFs