nccgroup / SteppingStonesLinks
A Red Team Activity Hub
☆235Updated last week
Alternatives and similar repositories for SteppingStones
Users that are interested in SteppingStones are comparing it to the libraries listed below
Sorting:
- SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.☆259Updated 11 months ago
- Slides and Codes used for the workshop Red Team Infrastructure Automation☆196Updated last year
- Azure mindmap for penetration tests☆194Updated 2 years ago
- Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit☆165Updated last year
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆231Updated last year
- Lord Of Active Directory - automatic vulnerable active directory on AWS☆148Updated 2 years ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆226Updated 10 months ago
- ☆102Updated 2 months ago
- linikatz is a tool to attack AD on UNIX☆154Updated 2 years ago
- Bounces when a fish bites - Evilginx database monitoring with exfiltration automation☆183Updated last year
- ☆190Updated last year
- Azure AD cheatsheet for the CARTP course☆143Updated 3 years ago
- ☆176Updated 9 months ago
- Everything and anything related to password spraying☆151Updated last year
- A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.☆270Updated 2 years ago
- SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.☆259Updated 2 months ago
- ☆159Updated 9 months ago
- A BloodHound collector for Microsoft Configuration Manager☆362Updated 6 months ago
- PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph☆287Updated last week
- Low and slow password spraying tool, designed to spray on an interval over a long period of time☆218Updated this week
- Generate and Manage KeyCredentialLinks☆211Updated this week
- Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the w…☆141Updated 2 years ago
- LudusHound is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment…☆350Updated 5 months ago
- A community-driven collection of BloodHound queries☆159Updated last week
- ☆166Updated last year
- ☆105Updated 2 years ago
- ☆154Updated 10 months ago
- A Azure Exploitation Toolkit for Red Team & Pentesters☆166Updated 2 years ago
- Continuous password spraying tool☆199Updated last month
- An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…☆166Updated last year