SANS Workshop: Active Directory Privilege Escalation with Empire!
☆37Nov 12, 2025Updated 9 months ago
Alternatives and similar repositories for SANS-Workshop-Lab
Users that are interested in SANS-Workshop-Lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆36Jul 23, 2026Updated last month
- ☆52Jun 12, 2026Updated 2 months ago
- Web File Manager☆11Jul 30, 2026Updated last month
- ☆88May 15, 2025Updated last year
- ☆12Oct 2, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Just another AD training, but free.☆17Aug 9, 2025Updated last year
- Lab used for workshop and CTF☆535Aug 23, 2026Updated last week
- simple C# portscanner - written for playing around with Metasploit's Execute-Assembly☆10Jul 1, 2023Updated 3 years ago
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated last year
- A cheatsheet for NetExec☆213Jun 9, 2025Updated last year
- bring your own clean ntdll (or other MS dlls)☆29Jul 14, 2025Updated last year
- A PoC that uses the DirSync protocol to poll Active Directory for changes☆13Aug 16, 2020Updated 6 years ago
- Installing wazuh SIEM Unified XDR and SIEM protection☆34Jun 3, 2025Updated last year
- The Azure Execution Tool☆159Feb 6, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Slides and Codes used for the workshop Red Team Infrastructure Automation☆192Apr 14, 2024Updated 2 years ago
- Abusing SSRF to deliver an authenticated command injection payload☆29Sep 1, 2025Updated last year
- An Ansible collection that installs an SCCM deployment with optional configurations.☆108Dec 8, 2025Updated 8 months ago
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆63Feb 4, 2026Updated 7 months ago
- Go (formerly PowerShell) collector for adding MSSQL attack paths to BloodHound with OpenGraph☆346Jul 10, 2026Updated last month
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆61Apr 13, 2025Updated last year
- Deploy a phishing infrastructure on the fly.☆80Dec 21, 2024Updated last year
- Ludus range for the Constructing Defense Lab☆137Jul 28, 2026Updated last month
- Microsoft Graph API post-exploitation framework with a browser-based GUI.☆52Apr 15, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- .NET tool used to enrich RPC telemetry☆102Jan 24, 2026Updated 7 months ago
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆124Updated this week
- Port of Cobalt Strike's Process Inject Kit☆195Dec 1, 2024Updated last year
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated last month
- Protect your Domain Controllers by auditing and restricting LDAP requests☆191May 29, 2025Updated last year
- Offensive RPC PoC☆91Sep 29, 2021Updated 4 years ago
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- Red Team tool for exfiltrating files from a target's Google Drive that you have access to, via Google's API.☆60Sep 2, 2021Updated 5 years ago
- 🛡️ Assign AD permissions via PowerShell templates — Simplify and standardize AD delegation with reusable PowerShell templates.☆30Apr 12, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify …☆46Feb 24, 2025Updated last year
- SCEP request tool for AD CS and Intune☆77Oct 24, 2025Updated 10 months ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆32May 30, 2024Updated 2 years ago
- ☆223Mar 20, 2026Updated 5 months ago
- This workshop is designed to provide you with a solid understanding of IronPython, its integration with the .NET framework, and how it ca…☆44Mar 19, 2024Updated 2 years ago
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆157Feb 10, 2025Updated last year
- Bunch of BOF files☆45Jun 30, 2025Updated last year