AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover/Kerberoast/AS-REP/AD CS ESC1-16/Shadow Creds/RBCD+KCD/Ghost-SPN/TGS-rewrite/Dollar-Ticket/WPAD/WSUS/PXE/SCCM/BloodHound auto-action/Loot/DCSync/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726/2026-24294/2026-26128). Authorized pentesting only.
☆215Sep 25, 2026Updated last month
Alternatives and similar repositories for ad-autopwn
Users that are interested in ad-autopwn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, passwor…☆783Updated this week
- Active Directory information dumper via ADWS for evasion purposes.☆322Oct 12, 2026Updated 2 weeks ago
- Pass-the-Passkey Family of Attacks☆232Sep 14, 2026Updated last month
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆844May 16, 2026Updated 5 months ago
- Dumping LSASS Evaded Endpoint Security Solutions☆19Feb 15, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.☆246Aug 9, 2026Updated 2 months ago
- AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerber…☆390Oct 17, 2026Updated last week
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 2 months ago
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆500Updated this week
- A modern Python-based Red Team Operations Workbench for managing engagements, intelligence, evidence, and reporting.☆16Aug 26, 2026Updated 2 months ago
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated 2 months ago
- PowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via …☆198Jan 25, 2026Updated 9 months ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 2 weeks ago
- The ultimate pentesting companion. Keep all your pentesting artifacts in one place.☆71Jul 27, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, a…☆649Updated this week
- Certighost POC☆338Jul 28, 2026Updated 3 months ago
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆318Sep 30, 2026Updated 3 weeks ago
- Repository for various Beacon Object Files (BOFs)☆172Oct 22, 2026Updated last week
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆264Sep 29, 2026Updated last month
- A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening …☆39Oct 7, 2026Updated 3 weeks ago
- ☆92Sep 19, 2026Updated last month
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆453Updated this week
- POC tool for ResetNightmare (CVE-2026-27912)☆223Aug 20, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆244Jul 8, 2026Updated 3 months ago
- ☆26Updated this week
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆68Sep 17, 2026Updated last month
- A marketplace for LLM skills☆731Updated this week
- ☆56Sep 18, 2026Updated last month
- Python tool to automatically perform SPN-less RBCD attacks.☆132Jan 7, 2026Updated 9 months ago
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆128Sep 1, 2026Updated last month
- .Net Assembly loader for the GMSAPasswordReader☆23Feb 15, 2023Updated 3 years ago
- ☆94Aug 5, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)☆16May 6, 2026Updated 5 months ago
- Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust,…☆155Aug 31, 2026Updated last month
- A small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI☆16Updated this week
- Step-by-step handbook for building autonomous security agents with clear limits, runnable lessons, diagrams, and honest evidence.☆76Sep 24, 2026Updated last month
- NetExec MCP☆89Oct 18, 2026Updated last week
- ☆59Updated this week
- Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 20…☆398Aug 16, 2026Updated 2 months ago