SANS Workshop: Active Directory Privilege Escalation with Empire!
☆37Nov 12, 2025Updated 11 months ago
Alternatives and similar repositories for SANS-Workshop-Lab
Users that are interested in SANS-Workshop-Lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 2 months ago
- ☆52Jun 12, 2026Updated 4 months ago
- Web File Manager☆11Jul 30, 2026Updated 2 months ago
- ☆86May 15, 2025Updated last year
- ☆12Oct 2, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Just another AD training, but free.☆17Aug 9, 2025Updated last year
- Lab used for workshop and CTF☆538Aug 23, 2026Updated last month
- simple C# portscanner - written for playing around with Metasploit's Execute-Assembly☆10Jul 1, 2023Updated 3 years ago
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated last year
- A cheatsheet for NetExec☆214Jun 9, 2025Updated last year
- bring your own clean ntdll (or other MS dlls)☆28Jul 14, 2025Updated last year
- A PoC that uses the DirSync protocol to poll Active Directory for changes☆13Aug 16, 2020Updated 6 years ago
- The Azure Execution Tool☆159Feb 6, 2026Updated 8 months ago
- Slides and Codes used for the workshop Red Team Infrastructure Automation☆192Apr 14, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Abusing SSRF to deliver an authenticated command injection payload☆28Sep 1, 2025Updated last year
- Installing wazuh SIEM Unified XDR and SIEM protection☆34Jun 3, 2025Updated last year
- An Ansible collection that installs an SCCM deployment with optional configurations.☆109Dec 8, 2025Updated 10 months ago
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆63Feb 4, 2026Updated 8 months ago
- Go (formerly PowerShell) collector for adding MSSQL attack paths to BloodHound with OpenGraph☆349Jul 10, 2026Updated 3 months ago
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆64Apr 13, 2025Updated last year
- Deploy a phishing infrastructure on the fly.☆80Dec 21, 2024Updated last year
- Ludus range for the Constructing Defense Lab☆139Jul 28, 2026Updated 2 months ago
- .NET tool used to enrich RPC telemetry☆102Jan 24, 2026Updated 8 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Microsoft Graph API post-exploitation framework with a browser-based GUI.☆59Apr 15, 2026Updated 6 months ago
- Port of Cobalt Strike's Process Inject Kit☆193Dec 1, 2024Updated last year
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆127Sep 1, 2026Updated last month
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated 2 months ago
- Protect your Domain Controllers by auditing and restricting LDAP requests☆192May 29, 2025Updated last year
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- Offensive RPC PoC☆90Sep 29, 2021Updated 5 years ago
- 🛡️ Assign AD permissions via PowerShell templates — Simplify and standardize AD delegation with reusable PowerShell templates.☆30Apr 12, 2026Updated 6 months ago
- IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify …☆45Feb 24, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- SCEP request tool for AD CS and Intune☆78Oct 24, 2025Updated 11 months ago
- Active Directory forensic framework☆16May 18, 2026Updated 4 months ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆32May 30, 2024Updated 2 years ago
- ☆227Oct 2, 2026Updated last week
- This workshop is designed to provide you with a solid understanding of IronPython, its integration with the .NET framework, and how it ca…☆44Mar 19, 2024Updated 2 years ago
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆160Feb 10, 2025Updated last year
- Bunch of BOF files☆45Jun 30, 2025Updated last year