idnahacks / AD_attack_defend_cheatsheet
A list of commands, tools and notes about enumerating and exploiting Active Directory and how to defend against these attacks
☆22Updated 3 years ago
Alternatives and similar repositories for AD_attack_defend_cheatsheet
Users that are interested in AD_attack_defend_cheatsheet are comparing it to the libraries listed below
Sorting:
- A collection of tools Neil and Andy have been working on released in one place and interlinked with previous tools☆88Updated last year
- ☆13Updated last month
- Deduplicate custom BloudHound queries from different datasets and merge them in one customqueries.json file.☆38Updated last year
- Convert ldapdomaindump to Bloodhound☆80Updated last year
- ☆71Updated last year
- OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.☆91Updated 3 years ago
- Custom queries list for BloodHound☆28Updated 8 months ago
- An Ansible collection that installs an ADFS deployment with optional configurations.☆30Updated 4 months ago
- ☆64Updated 2 weeks ago
- ☆12Updated 2 years ago
- dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-facto…☆41Updated last year
- Bypass Constrained Language Mode in PowerShell☆28Updated 5 years ago
- A module for CME that spiders across a domain.☆35Updated 2 years ago
- This repo hosts a poc of how to execute F# code within an unmanaged process☆67Updated 10 months ago
- Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…☆25Updated last year
- Python tool to find vulnerable AD object and generating csv report☆26Updated 2 years ago
- ☆44Updated 10 months ago
- Windows Post-Exploitation tools wrapper☆12Updated 10 months ago
- Tradecraft Development Fundamentals☆40Updated 3 years ago
- User enumeration and password spraying tool for testing Azure AD☆69Updated 3 years ago
- Scripts that automate portions of pentests.☆50Updated 2 weeks ago
- Convert an LDIF file to JSON files ingestible by BloodHound☆42Updated last month
- Azure pentesting reference for Altered Security Lab☆24Updated 3 years ago
- This script gets all accepted domains in Microsoft 365 using autodiscover, gets the tenant name and checks if there is a Microsoft Defend…☆24Updated 11 months ago
- Linux Post-Exploitation tools wrapper☆20Updated 2 years ago
- Small utility to chunk up a large BloodHound JSON file into smaller files for importing.☆93Updated 2 years ago
- Federated Office365 user enumeration based on correlated response trend analysis☆51Updated 3 years ago
- Generate password spraying lists based on the pwdLastSet-attribute of users.☆56Updated last year
- Dump Kerberos tickets from the KCM database of SSSD☆50Updated 8 months ago
- Get Fine Grained Password Policy☆70Updated last month