MarkoH17 / Spray365

Related projects: ⓘ

• ralphte / build_a_phish
  Ansible playbook to deploy a phishing engagement in the cloud.
  ☆216Updated 2 years ago
• layer8secure / SilentHound
  Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.
  ☆475Updated last year
• trustedsec / orpheus
  Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types
  ☆360Updated last year
• Dec0ne / ShadowSpray
  A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…
  ☆441Updated last year
• xforcered / SQLRecon
  A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
  ☆384Updated 2 months ago
• rvrsh3ll / TokenTactics
  Azure JWT Token Manipulation Toolset
  ☆583Updated 10 months ago
• MWR-CyberSec / PXEThief
  PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configur…
  ☆289Updated 3 months ago
• dievus / lnkbomb
  Malicious shortcut generator for collecting NTLM hashes from insecure file shares.
  ☆298Updated last year
• garrettfoster13 / sccmhunter
  ☆633Updated this week
• Hackndo / sprayhound
  Password spraying tool and Bloodhound integration
  ☆203Updated last year
• dievus / msLDAPDump
  LDAP enumeration tool implemented in Python3
  ☆216Updated 2 weeks ago
• garrettfoster13 / pre2k
  ☆262Updated this week
• MzHmO / PowershellKerberos
  Some scripts to abuse kerberos using Powershell
  ☆307Updated last year
• p0dalirius / FindUncommonShares
  FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE acces…
  ☆385Updated last month
• SecuProject / ADenum
  AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with…
  ☆285Updated last year
• Leo4j / Invoke-ADEnum
  Automate Active Directory Enumeration
  ☆375Updated 2 weeks ago
• nyxgeek / onedrive_user_enum
  onedrive user enumeration - pentest tool to enumerate valid o365 users
  ☆601Updated 2 months ago
• nheiniger / SnaffPoint
  A tool for pointesters to find candies in SharePoint
  ☆228Updated last year
• 0xJs / domain_audit
  Audit tool for Active Directory. Automates a lot of checks from a pentester perspective.
  ☆155Updated 4 months ago
• puzzlepeaches / msprobe
  Finding all things on-prem Microsoft for password spraying and enumeration.
  ☆251Updated 2 years ago
• kaluche / bloodhound-quickwin
  Simple script to extract useful informations from the combo BloodHound + Neo4j
  ☆190Updated 9 months ago
• nodauf / GoMapEnum
  User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin
  ☆418Updated 7 months ago
• knavesec / Max
  Maximizing BloodHound. Max is a good boy.
  ☆496Updated last month
• CravateRouge / autobloody
  Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound
  ☆402Updated 5 months ago
• paranoidninja / O365-Doppelganger
  A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user
  ☆249Updated 2 years ago
• ShutdownRepo / targetedKerberoast
  Kerberoast with ACL abuse capabilities
  ☆306Updated last month
• nyxgeek / ntlmscan
  scan for NTLM directories
  ☆345Updated 2 months ago
• ZephrFish / Bloodhound-CustomQueries
  Custom Queries - Brought Up to BH4.1 syntax
  ☆217Updated last year
• PShlyundin / ldap_shell
  AD ACL abuse
  ☆241Updated 2 months ago
• grimlockx / ADCSKiller
  An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer
  ☆695Updated last year