nccgroup / SteppingStonesLinks
A Red Team Activity Hub
☆225Updated 3 weeks ago
Alternatives and similar repositories for SteppingStones
Users that are interested in SteppingStones are comparing it to the libraries listed below
Sorting:
- SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.☆256Updated 9 months ago
- Slides and Codes used for the workshop Red Team Infrastructure Automation☆196Updated last year
- Azure mindmap for penetration tests☆193Updated 2 years ago
- Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit☆161Updated 11 months ago
- Lord Of Active Directory - automatic vulnerable active directory on AWS☆147Updated 2 years ago
- Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database☆249Updated last month
- ☆174Updated 7 months ago
- Everything and anything related to password spraying☆151Updated last year
- ☆98Updated 2 weeks ago
- ☆188Updated last year
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆223Updated 8 months ago
- A BloodHound collector for Microsoft Configuration Manager☆353Updated 4 months ago
- Bounces when a fish bites - Evilginx database monitoring with exfiltration automation☆183Updated last year
- A community-driven collection of BloodHound queries☆156Updated last month
- ☆154Updated 8 months ago
- Azure AD cheatsheet for the CARTP course☆137Updated 3 years ago
- linikatz is a tool to attack AD on UNIX☆151Updated 2 years ago
- Generate and Manage KeyCredentialLinks☆179Updated last month
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆196Updated last year
- ☆161Updated last year
- SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.☆250Updated last week
- An Ansible role that install the Adaptix C2 server and/or client on Debian based hosts☆172Updated 6 months ago
- An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…☆166Updated last year
- A Azure Exploitation Toolkit for Red Team & Pentesters☆165Updated 2 years ago
- Proof of concept: using a Cloudflare worker for AITM attacks☆136Updated 10 months ago
- Low and slow password spraying tool, designed to spray on an interval over a long period of time☆216Updated last month
- LudusHound is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment…☆335Updated 3 months ago
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆181Updated 6 months ago
- Utility to craft HTML or SVG smuggled files for Red Team engagements☆246Updated last year
- CaptainCredz is a modular and discreet password-spraying tool.☆132Updated 4 months ago