Contains a collection of Bash scripts designed for comprehensive security audits and network mapping of Active Directory (AD) environments. The scripts automate various tasks including LDAP querying, Kerberos ticket analysis, SMB enumeration, and exploitation of known vulnerabilities like Zerologon and PetitPotam.
☆149May 17, 2024Updated 2 years ago
Alternatives and similar repositories for AD-AssessmentKit
Users that are interested in AD-AssessmentKit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.☆68Mar 6, 2024Updated 2 years ago
- masscan with exclusive excludes☆60Nov 8, 2023Updated 2 years ago
- Source code and examples for PassiveAggression☆64Jun 6, 2024Updated 2 years ago
- Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Su…☆40Nov 16, 2023Updated 2 years ago
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆71Feb 3, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Powershell tools used for Red Team / Pentesting.☆85Jan 8, 2024Updated 2 years ago
- ☆88Jan 2, 2024Updated 2 years ago
- CIA UAC bypass implementation of Stinger that obtains the token from an auto-elevated process, modifies it, and reuses it to execute as A…☆301Feb 2, 2026Updated 5 months ago
- Golang weaponization for red teamers.☆526Jan 17, 2024Updated 2 years ago
- A Slack bot phishing framework for Red Teaming exercises☆167Apr 27, 2024Updated 2 years ago
- Hadoken: A versatile Active Directory pentesting tool engineered to identify vulnerabilities and streamline security assessments.☆47Oct 26, 2025Updated 9 months ago
- Dominate Active Directory with PowerShell.☆1,194Nov 28, 2025Updated 7 months ago
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆490Oct 14, 2022Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Simple python script for brute force attack to smtp users☆14Mar 31, 2026Updated 3 months ago
- Docker Remote API Scanner and Exploit☆182Nov 13, 2023Updated 2 years ago
- NetworkAssessment: Network Compromise Assessment Tool☆95May 31, 2024Updated 2 years ago
- TrafficWatch, a packet sniffer tool, allows you to monitor and analyze network traffic from PCAP files☆137Jun 1, 2024Updated 2 years ago
- 针对多个框架 的高度自定义的内存马一键打入工具 | A highly customized memory shell one-click injection tool for multiple frameworks☆48Feb 6, 2024Updated 2 years ago
- Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.☆84Sep 13, 2024Updated last year
- Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound☆705Oct 23, 2025Updated 9 months ago
- A proof-of-concept C2 channel through DuckDuckGo's image proxy service☆77Nov 12, 2023Updated 2 years ago
- Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in…☆516Aug 7, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An aggressor script that can help automate payload building in Cobalt Strike☆119Jan 22, 2024Updated 2 years ago
- PrestaXSRF is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's critical…☆32Dec 26, 2023Updated 2 years ago
- KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync).☆268Jul 7, 2026Updated 2 weeks ago
- PowerSploit - A PowerShell Post-Exploitation Framework☆22Jun 11, 2022Updated 4 years ago
- Lateral Movement☆126Nov 14, 2023Updated 2 years ago
- A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…☆104Jan 19, 2023Updated 3 years ago
- Abuse leaked token handles.☆136Dec 14, 2023Updated 2 years ago
- Powershell script to help Speed up Threat hunting incident response processes☆44Mar 31, 2026Updated 3 months ago
- AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover se…☆1,544Mar 18, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An interactive shell to spoof some LOLBins command line☆188Jan 27, 2024Updated 2 years ago
- A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.☆379Mar 24, 2026Updated 4 months ago
- Detects CanaryTokens in Office docs and PDFs (docx, xlsx, pptx, pdf) without triggering alerts☆147Dec 23, 2025Updated 7 months ago
- Useful C2 techniques and cheat sheets learned from engagements☆603Jun 11, 2026Updated last month
- ScanExp automates the scanning of any machine's open ports via the ip address and performs a brute force attack on ports 20, 21 for the F…☆27Oct 14, 2023Updated 2 years ago
- hauditor is a tool designed to analyze the security headers returned by a web page.☆177Jul 6, 2024Updated 2 years ago
- ☆188Jan 23, 2024Updated 2 years ago