kurobeats / Sparkler
The tool creates a Microsoft Active Directory Domain with a structure and objects for learning.
☆26Updated 3 years ago
Alternatives and similar repositories for Sparkler:
Users that are interested in Sparkler are comparing it to the libraries listed below
- PS-TrustedDocuments: PowerShell script to handle information on trusted documents for Microsoft Office☆35Updated 2 years ago
- SMBMap is a handy SMB enumeration tool - here with Kerberos support☆73Updated 3 years ago
- blame Huy☆42Updated 4 years ago
- Simple PowerShell script to enable process scanning with Yara.☆93Updated 2 years ago
- A repo to support the book☆107Updated 3 years ago
- Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups☆60Updated 2 years ago
- GoldenSAML Attack Libraries and Framework☆73Updated 10 months ago
- BloodCheck enables Red and Blue Teams to manage multiple Neo4j databases and run Cypher queries against a BloodHound dataset.☆17Updated 3 years ago
- ☆55Updated last year
- My conference presentations☆66Updated last year
- Leghorn code for PKI abuse☆32Updated 3 years ago
- ☆38Updated 3 years ago
- DEFCON 31 slide deck and video link☆59Updated 9 months ago
- Yara Rules for Modern Malware☆77Updated last year
- ☆82Updated 2 years ago
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆72Updated 3 years ago
- Silver SAML forgery tool☆50Updated last year
- PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.☆69Updated 4 months ago
- Continuous kerberoast monitor☆45Updated last year
- Default Detections for EDR☆96Updated last year
- ☆37Updated last year
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆93Updated last year
- Tool to perform lateral movement between AAD joined devices☆60Updated 2 years ago
- create a "simulated internet" cyber range environment☆16Updated last month
- Pushes Sysmon Configs☆88Updated 3 years ago
- Bloodhound Portable for Windows☆51Updated 2 years ago
- Hashcat module that can crack a password used to derive an AES-128 key with CryptDeriveKey from CryptoAPI☆31Updated last year
- Kerberoast Detection Script☆30Updated 5 months ago
- ☆106Updated 2 years ago
- ☆79Updated last year