Python3 script to quickly get various information from a domain controller through his LDAP service.

Mimikatz implementation in pure Python

Directory Services Internals (DSInternals) PowerShell Module and Framework

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Releases for the Zui Insiders app.

A tool to perform Kerberos pre-auth bruteforcing

RDL的堆溢出导致的RCE

BloodyAD is an Active Directory Privilege Escalation Framework

Impacket is a collection of Python classes for working with network protocols.

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

Trying to tame the three-headed dog.

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

NTLMv1 Multitool

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.

Check for LDAP protections regarding the relay of NTLM authentication

Lists who can read any gMSA password blobs and parses them if the current user has access.

Kerberos unconstrained delegation abuse toolkit

AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos.

Simple & Powerful PowerShell Script Obfuscator

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution