Contains a collection of Bash scripts designed for comprehensive security audits and network mapping of Active Directory (AD) environments. The scripts automate various tasks including LDAP querying, Kerberos ticket analysis, SMB enumeration, and exploitation of known vulnerabilities like Zerologon and PetitPotam.
☆147May 17, 2024Updated 2 years ago
Alternatives and similar repositories for AD-AssessmentKit
Users that are interested in AD-AssessmentKit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.☆67Mar 6, 2024Updated 2 years ago
- masscan with exclusive excludes☆61Nov 8, 2023Updated 2 years ago
- Source code and examples for PassiveAggression☆64Jun 6, 2024Updated 2 years ago
- Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Su…☆38Nov 16, 2023Updated 2 years ago
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆71Feb 3, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Powershell tools used for Red Team / Pentesting.☆84Jan 8, 2024Updated 2 years ago
- ☆89Jan 2, 2024Updated 2 years ago
- CIA UAC bypass implementation of Stinger that obtains the token from an auto-elevated process, modifies it, and reuses it to execute as A…☆300Feb 2, 2026Updated 7 months ago
- Golang weaponization for red teamers.☆526Jan 17, 2024Updated 2 years ago
- A Slack bot phishing framework for Red Teaming exercises☆166Apr 27, 2024Updated 2 years ago
- Hadoken: A versatile Active Directory pentesting tool engineered to identify vulnerabilities and streamline security assessments.☆46Oct 26, 2025Updated 10 months ago
- Dominate Active Directory with PowerShell.☆1,201Sep 17, 2026Updated last week
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆494Oct 14, 2022Updated 3 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Simple python script for brute force attack to smtp users☆15Mar 31, 2026Updated 5 months ago
- Docker Remote API Scanner and Exploit☆180Nov 13, 2023Updated 2 years ago
- NetworkAssessment: Network Compromise Assessment Tool☆94May 31, 2024Updated 2 years ago
- TrafficWatch, a packet sniffer tool, allows you to monitor and analyze network traffic from PCAP files☆137Jun 1, 2024Updated 2 years ago
- 针对多个框架的高度自定义的 内存马一键打入工具 | A highly customized memory shell one-click injection tool for multiple frameworks☆47Feb 6, 2024Updated 2 years ago
- Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.☆83Sep 13, 2024Updated 2 years ago
- Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound☆714Oct 23, 2025Updated 11 months ago
- A proof-of-concept C2 channel through DuckDuckGo's image proxy service☆78Nov 12, 2023Updated 2 years ago
- Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in…☆515Aug 7, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An aggressor script that can help automate payload building in Cobalt Strike☆118Jan 22, 2024Updated 2 years ago
- PrestaXSRF is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's critical…☆33Dec 26, 2023Updated 2 years ago
- KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync).☆270Jul 7, 2026Updated 2 months ago
- PowerSploit - A PowerShell Post-Exploitation Framework☆22Jun 11, 2022Updated 4 years ago
- Lateral Movement☆125Nov 14, 2023Updated 2 years ago
- A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…☆106Jan 19, 2023Updated 3 years ago
- Abuse leaked token handles.☆136Dec 14, 2023Updated 2 years ago
- AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover se…☆1,566Mar 18, 2026Updated 6 months ago
- An interactive shell to spoof some LOLBins command line☆187Jan 27, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.☆379Mar 24, 2026Updated 6 months ago
- Detects CanaryTokens in Office docs and PDFs (docx, xlsx, pptx, pdf) without triggering alerts☆149Aug 11, 2026Updated last month
- Triages a suspect Windows machine in minutes. Collects processes, services, autoruns, event logs and forensic artifacts, flags attacker a…☆45Aug 24, 2026Updated last month
- Useful C2 techniques and cheat sheets learned from engagements☆609Jun 11, 2026Updated 3 months ago
- ScanExp automates the scanning of any machine's open ports via the ip address and performs a brute force attack on ports 20, 21 for the F…☆27Oct 14, 2023Updated 2 years ago
- hauditor is a tool designed to analyze the security headers returned by a web page.☆177Jul 6, 2024Updated 2 years ago
- ☆187Jan 23, 2024Updated 2 years ago