nccgroup / SteppingStones
A Red Team Activity Hub
☆203Updated 3 weeks ago
Alternatives and similar repositories for SteppingStones:
Users that are interested in SteppingStones are comparing it to the libraries listed below
- SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.☆185Updated last month
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆128Updated 2 weeks ago
- Lord Of Active Directory - automatic vulnerable active directory on AWS☆142Updated last year
- Everything and anything related to password spraying☆133Updated 10 months ago
- Continuous password spraying tool☆179Updated last month
- Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit☆145Updated 4 months ago
- Slides and Codes used for the workshop Red Team Infrastructure Automation☆180Updated last year
- Azure mindmap for penetration tests☆181Updated last year
- A cheatsheet for NetExec☆115Updated 2 months ago
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆169Updated 7 months ago
- ☆258Updated this week
- peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.☆116Updated 2 weeks ago
- linikatz is a tool to attack AD on UNIX☆145Updated last year
- ☆297Updated last month
- ☆181Updated 4 months ago
- Retrieve and display information about active user sessions on remote computers. No admin privileges required.☆182Updated 8 months ago
- Low and slow password spraying tool, designed to spray on an interval over a long period of time☆194Updated 2 months ago
- Generate and Manage KeyCredentialLinks☆149Updated this week
- ☆156Updated last year
- ☆190Updated 6 months ago
- Malware As A Service☆132Updated last year
- ☆142Updated 2 weeks ago
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆297Updated 5 months ago
- Just some random Red Team Scripts that can be useful☆151Updated 9 months ago
- Bounces when a fish bites - Evilginx database monitoring with exfiltration automation☆166Updated 10 months ago
- Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)☆184Updated 6 months ago
- Custom Queries - Brought Up to BH4.1 syntax☆251Updated 5 months ago
- An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…☆165Updated 6 months ago
- Make everyone in your VLAN ASRep roastable☆187Updated last month
- A Slack bot phishing framework for Red Teaming exercises☆166Updated 11 months ago