zblurx / BloodHoundCustomQueriesLinks
My BloodHound custom queries
☆25Updated 2 years ago
Alternatives and similar repositories for BloodHoundCustomQueries
Users that are interested in BloodHoundCustomQueries are comparing it to the libraries listed below
Sorting:
- Get Fine Grained Password Policy☆74Updated 5 months ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆75Updated 2 years ago
- Secretsdump C# version only supporting local (live) operation☆50Updated 5 months ago
- SuperSharpShares is a tool designed to automate enumerating domain shares, allowing for quick verification of accessible shares by your a…☆74Updated last year
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆56Updated 3 years ago
- ☆73Updated 3 months ago
- A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…☆32Updated 2 years ago
- Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3☆78Updated 3 years ago
- ☆44Updated last year
- Extract registry and NTDS secrets from local or remote disk images☆43Updated 6 months ago
- Leveraging AWS Lambda Function URLs for C2 Redirection☆36Updated 2 years ago
- Federated Office365 user enumeration based on correlated response trend analysis☆51Updated 3 years ago
- Standalone Cobalt Strike operation logging Aggressor script for Ghostwriter 2.0+☆32Updated last year
- PowerSploit - A PowerShell Post-Exploitation Framework☆42Updated 6 months ago
- A BOF tool that can be used to collect passwords using CredUIPromptForWindowsCredentialsName.☆15Updated 3 years ago
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆59Updated 2 months ago
- ☆14Updated 7 months ago
- Some scripts to support with importing large datasets into BloodHound☆81Updated last year
- Scripts for public use that we've randomly written, or have updated from other people's work.☆40Updated last year
- ☆35Updated 7 months ago
- WhoAmI by asking the LDAP service on a domain controller.☆63Updated 3 years ago
- Unchain AMSI by patching the provider’s unmonitored memory space☆91Updated 2 years ago
- ☆36Updated 8 months ago
- Scripts to interact with Microsoft Graph APIs☆43Updated 10 months ago
- ☆52Updated last year
- Validates priv escalation of AD trusts☆47Updated 6 months ago
- time-based user enum via Basic Auth in Azure against Autodiscover☆32Updated last year
- A collection of tools Neil and Andy have been working on released in one place and interlinked with previous tools☆88Updated 2 years ago
- ☆28Updated 2 years ago
- Convert an LDIF file to JSON files ingestible by BloodHound☆43Updated 5 months ago