nccgroup / SteppingStones
A Red Team Activity Hub
☆207Updated 3 weeks ago
Alternatives and similar repositories for SteppingStones:
Users that are interested in SteppingStones are comparing it to the libraries listed below
- SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.☆217Updated 2 months ago
- Everything and anything related to password spraying☆134Updated 11 months ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆139Updated last month
- Lord Of Active Directory - automatic vulnerable active directory on AWS☆143Updated last year
- Slides and Codes used for the workshop Red Team Infrastructure Automation☆182Updated last year
- Make everyone in your VLAN ASRep roastable☆190Updated 2 months ago
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆172Updated 8 months ago
- Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit☆145Updated 4 months ago
- Continuous password spraying tool☆183Updated 2 months ago
- A cheatsheet for NetExec☆119Updated 3 months ago
- Azure mindmap for penetration tests☆181Updated last year
- ☆164Updated 3 weeks ago
- linikatz is a tool to attack AD on UNIX☆146Updated last year
- Generate and Manage KeyCredentialLinks☆156Updated 3 weeks ago
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆300Updated 5 months ago
- ☆157Updated last year
- ☆298Updated last month
- Custom Queries - Brought Up to BH4.1 syntax☆252Updated last week
- Bounces when a fish bites - Evilginx database monitoring with exfiltration automation☆168Updated 10 months ago
- peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.☆174Updated 3 weeks ago
- Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data☆182Updated this week
- ☆142Updated last month
- ☆191Updated 7 months ago
- Retrieve and display information about active user sessions on remote computers. No admin privileges required.☆183Updated 8 months ago
- ☆182Updated 5 months ago
- Find potential DLL Sideloads on your windows computer☆204Updated 3 months ago
- Simple script to extract useful informations from the combo BloodHound + Neo4j☆241Updated last month
- Low and slow password spraying tool, designed to spray on an interval over a long period of time☆195Updated 2 months ago
- A Slack bot phishing framework for Red Teaming exercises☆166Updated last year
- Impacket is a collection of Python classes for working with network protocols.☆280Updated 3 months ago