pi-hole

Bloqueo de anuncios en toda la red mediante tu propio hardware Linux Pi-hole® es un sumidero de DNS que protege tus dispositivos de contenido no deseado sin necesidad de instalar software en el cliente. Fácil de instalar : nuestros diálogos te guían a través del sencillo proceso de instalación en...

EAST

Extensible Azure Security Tool Extensible Azure Security Tool Later referred as E.A.S.T is tool for assessing Azure and to some extent Azure AD security controls. Primary use case of EAST is Security data collection for evaluation in Azure Assessments. This information JSON content can then be us...

PyADRecon

Python3 implementation of an improved ADRecon for Pentesters and Blue Teams. ADRecon is a tool which gathers information about MS Active Directory and generates an XSLX report to provide a holistic picture of the current state of the target AD environment. !TIP If you are a Red Team, may check ou...

ublockdnsclient

uBlockDNS Client uBlockDNS Client is an independent project and is not affiliated with, endorsed by, or related to uBlock Origin or its maintainer. uBlockDNS Client brings DNS-level ad and tracker blocking to your entire device. It uses community-maintained filter lists such as EasyList and...

CVE-2019-15858

CVE-2019-15858 Ejecución remota de código no autenticada en Woody Ad Snippets PoC Una vulnerabilidad de importación de opciones no autenticada combinada con una vulnerabilidad XSS almacenada puede llevar a la ejecución remota de código en el plugin Woody Ad Snippets de WordPress más de 90,000...

adexplorersnapshot-rs

ADExplorerSnapshot-rs Reescritura de ADExplorerSnapshot.py. Genera un .tar.gz de archivos JSON de BloodHound CE para su ingesta. Por favor, consulta los issues de este proyecto antes de usarlo. Todavía no es un reemplazo directo. Instalación Los binarios precompilados para Linux y Windows se...

SSOh-No

SSOh-No This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute...

masscan

MASSCAN: Escáner de puertos IP masivo Este es un escáner de puertos a escala de Internet. Puede escanear todo Internet en menos de 5 minutos, transmitiendo 10 millones de paquetes por segundo, desde una sola máquina. Su uso parámetros, salida es similar a nmap, el escáner de puertos más famoso. E...

ad-ldap-enum

ad-ldap-enum ad-ldap-enum is a Python script developed to collect users/computers and their group membership from Active Directory. In large Active Directory environments, tools such as NBTEnum were not quick enough. By executing LDAP queries against a domain controller, ad-ldap-enum is able to...

ADSyncDump-BOF

ADSyncDump BOF El ADSyncDump BOF es un port del adconnectdump.py / ADSyncDecrypt de Dirkjan Mollema a un archivo de objeto Beacon BOF para usarlo con Cobalt Strike, Sliver y Havoc. !NOTE La herramienta ha sido probada en Windows Server 2019 con Azure AD Connect versión 2.2.1.0. La versión de 32...

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

cleanldap

CleanLdap BOF to perform stealthy LDAP queries over AD WS Arguments Just going to cut to the chase, here are the args and what they mean: Z: DC Hostname "dc01.example.com" Z: LDAP query "objectClass=" Z: Comma separated list of LDAP attributes "samaccountname,distinguishedName,cn" - if empty,...

zen-desktop

Zen: Your Comprehensive Ad-Blocker and Privacy Guard There is, simply, no way, to ignore privacy. Because a citizenry’s freedoms are interdependent, to surrender your own privacy is really to surrender everyone’s. Edward Snowden, Permanent Record Website • Mastodon • Bluesky • Discord •...

adwsdomaindump

ADWSDomainDump Active Directory information dumper via ADWS Active Directory Web Services. Install Recommended install: pipx install git+https://github.com/mverschu/adwsdomaindump or pipx install . Usage adwsdomaindump -u 'corp.local\jsmith' -p 'password' -n 10.0.0.1 dc01.corp.local Connecting to...

aad-bofs

Este repositorio contiene una colección de BOFs para diversos ataques a Azure AD. Todos los BOFs han sido probados en batalla durante compromisos. Siéntete libre de contribuir también :...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

ActiveDirectoryEnumeration

ADE - ActiveDirectoryEnum python -m ade usage: ade -h --dc DC -o OUTFILE -u USER -s -smb -kp -bh -spn -sysvol --all --no-creds --dry-run --exploit EXPLOIT / | / / / \ / / / / / /| |/ / / / | / / / / / / / / / / / / / / / / / / / / / / \ / / // // /| |/ / / // / / / / / // /...

hblock

Improve your security and privacy by blocking ads, tracking and malware domains. What is this for? hBlock is a POSIX-compliant shell script that gets a list of domains that serve ads, tracking scripts and malware from multiple sources and creates a hosts file, among other formats, that prevents...

AADInternals

AADInternals AADInternals is PowerShell module for administering Azure AD and Office 365 For details, please visit https://aadinternals.com/aadinternals Installation Run the following PowerShell command to install Install-Module AADInternals...

BadBlood

BadBlood BadBlood de Secframe llena un dominio de Microsoft Active Directory con una estructura y miles de objetos. La salida de la herramienta es un dominio similar a un dominio del mundo real. Después de ejecutar BadBlood en un dominio, los analistas e ingenieros de seguridad pueden practicar e...