Analyzing AD domains for security risks related to user accounts
☆64Nov 11, 2022Updated 3 years ago
Alternatives and similar repositories for dc-sonar
Users that are interested in dc-sonar are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…☆49Jun 21, 2022Updated 4 years ago
- Extensible Azure Security Tool - Documentation☆84Jun 1, 2023Updated 3 years ago
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆97Jan 13, 2026Updated 6 months ago
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆404Aug 15, 2025Updated 11 months ago
- Data visualization for blue teams☆127Jan 20, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Find Microsoft Exchange instance for a given domain and identify the exact version☆190Jan 30, 2023Updated 3 years ago
- A WLAN red team framework.☆162Feb 9, 2026Updated 5 months ago
- Cloud Exploit Framework☆112May 11, 2022Updated 4 years ago
- ☆122Mar 28, 2025Updated last year
- AD ACL abuse☆407Sep 11, 2025Updated 10 months ago
- ☆28Aug 18, 2023Updated 2 years ago
- ☆80Apr 18, 2023Updated 3 years ago
- Port forwarding via MSRPC (445/tcp) [WIP]☆34Aug 26, 2021Updated 4 years ago
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆490Oct 14, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Python tool to find vulnerable AD object and generating csv report☆26Jul 4, 2022Updated 4 years ago
- cobaltstrike 上线提醒☆36Feb 24, 2021Updated 5 years ago
- BlueHound - pinpoint the security issues that actually matter☆769Jul 12, 2023Updated 3 years ago
- A fast enumeration tool for Windows Active Directory Pentesting written in Go☆285Jan 14, 2023Updated 3 years ago
- Crawlector is a threat hunting framework designed for scanning websites for malicious objects.☆123Dec 13, 2025Updated 7 months ago
- M365 Defender SOC Playbooks☆24Feb 6, 2023Updated 3 years ago
- A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.☆118Mar 31, 2026Updated 3 months ago
- Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.☆504Jan 23, 2023Updated 3 years ago
- Classic Bofa adapted to CobaltStrike.☆11Oct 4, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using…☆153Dec 26, 2023Updated 2 years ago
- Exchange Online Protection & Microsoft Defender For Office 365 Hardering Tool☆12Jan 14, 2023Updated 3 years ago
- Malware vulnerability intel tool for third-party attackers☆122Oct 24, 2024Updated last year
- CIS Benchmark testing of Windows SIEM configuration☆45May 25, 2023Updated 3 years ago
- Tool to start processes as SYSTEM using token duplication☆37Oct 27, 2020Updated 5 years ago
- Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.☆488Jul 9, 2024Updated 2 years ago
- YARA rule analyzer to improve rule quality and performance☆116Jun 4, 2026Updated last month
- Finding all things on-prem Microsoft for password spraying and enumeration.☆259May 17, 2022Updated 4 years ago
- Automated exploitation of MSSQL servers at scale☆125Jul 7, 2026Updated 2 weeks ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Your template-based BloodHound terminal companion tool☆454Jan 21, 2026Updated 6 months ago
- ☆28Mar 29, 2022Updated 4 years ago
- A Powershell module including a couple of cmdlets for EWS Enum/Exploitation.☆19Aug 6, 2019Updated 6 years ago
- A C# tool to output crackable DPAPI hashes from user MasterKeys☆146Jun 12, 2026Updated last month
- ☆16May 20, 2022Updated 4 years ago
- SSH Private Key Looting Wordlists. A collection of wordlists to aid in locating or brute-forcing SSH private key file names.☆56Feb 22, 2024Updated 2 years ago
- 1C RAS Offensive Security Tool☆30Oct 4, 2023Updated 2 years ago