NoiseHound

NoiseHound...

ResetNightmare-impacket

ResetNightmare — CVE-2026-27912 Linux / impacket tooling for CVE-2026-27912 "ResetNightmare". Resets a target Active Directory account's password by requesting a kadmin/changepw TGT for an NTENTERPRISE principal whose name is the target's sAMAccountName, using an account UPNUser on which we can...

ldeep

============== Project Status .. image:: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml/badge.svg :target: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml :alt: Build status .. image:: https://badgen.net/pypi/v/ldeep :target:...

ldeep

============== Project Status .. image:: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml/badge.svg :target: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml :alt: Build status .. image:: https://badgen.net/pypi/v/ldeep :target:...

nimux

Pure-Nim network enumeration and remote execution toolkit nimux - Native Operator Toolkit nimux is a native command surface for authorized security assessments. It combines network enumeration, lightweight web discovery, credential validation, Active Directory operations, Kerberos workflows, remo...

vulnerable-AD

Vulnerable-AD Create a vulnerable active directory that's allowing you to test most of active directory attacks in local lab Main Features Randomize Attacks Full Coverage of the mentioned attacks you need run the script in DC with Active Directory installed Some of attacks require client...

smbAutoRelay

AVERTISSEMENT : JE NE SUIS PAS RESPONSABLE DE L'UTILISATION ABUSIVE DE CET OUTIL. VOUS L'UTILISEZ À VOS PROPRES RISQUES. Avant de l'exécuter, assurez-vous d'être dans un environnement contrôlé et où vous êtes autorisé à effectuer ce type d'exercice. SOYEZ GENTIL S'IL VOUS PLAÎT : SMB AutoRelay SM...

SecurEnvoy Two Factor Authentication - LDAP Injection

Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through blind LDAP injection attacks against the DESKTOP service exposed on the...

latma

Outil d'analyse de mouvement latéral L'outil d'analyse de mouvement latéral LATMA collecte les journaux d'authentification du domaine et des environnements Azure AD et recherche les potentielles attaques de mouvement latéral et activités suspectes. Le mouvement latéral peut se situer dans...

ADLab

Module PowerShell ADLab Introduction Ce module a pour but d'automatiser le déploiement d'un laboratoire Active Directory pour s'entraîner au test de pénétration interne. Crédits à Joe Helle et à son cours PowerShell pour pentesteurs concernant la génération des vecteurs d'attaque. Instructions...

Pentest-Cheat-Sheet

Шпаргалка по пентесту В интернете много шпаргалок, но это моя. Сейчас она ещё в процессе разработки и существует как черновик, который иногда обновляется часто. Я начал её, когда готовился к OSCP, но теперь она развивается и включает больше практических вещей, которые нужны мне как red teamer...

krbrelayx

Krbrelayx - набор инструментов для ретрансляции Kerberos и злоупотребления безусловной делегацией Набор инструментов для злоупотребления Kerberos. Для работы требует impacket, ldap3 и dnspython. Рекомендуется устанавливать impacket напрямую из git, чтобы иметь последнюю версию. Дополнительная...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

modifyCertTemplate

Zweck Dieses Tool soll einen Bediener dabei unterstützen, ADCS-Zertifikatsvorlagen so zu modifizieren, dass ein erstellter anfälliger Zustand für eine Privilegienausweitung genutzt werden kann und die Vorlage anschließend wieder in ihren vorherigen Zustand versetzt wird. Es wurde speziell für ein...

acltoolkit

acltoolkit acltoolkit è un coltellino svizzero per abusi ACL. Implementa molteplici abusi ACL. Indice acltoolkit Indice Installazione Utilizzo Comandi get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installazione root@kitploit: pip install acltoolkit-ad...

DLLPasswordFilterImplant

DLLPasswordFilterImplant DLLPasswordFilterImplant è un DLL filtro password personalizzato che consente la cattura delle credenziali di un utente. Ogni evento di cambio password su un dominio attiverà il DLL registrato per esfiltrare il nome utente e il nuovo valore della password prima di cambiar...

LDAPPER

Introduzione Questo strumento è stato scritto per risolvere molti dei problemi che riscontravo con ldapsearch e l'interazione con AD in generale. In particolare, lo strumento affronta i seguenti problemi: 1. Impossibilità di restituire più di mille risultati da AD. Questo strumento supporta la...

Awesome-RedTeam-Cheatsheet

Tecniche Red Team Tecniche di Accesso Iniziale presto Tecniche di Esecuzione di Codice presto Tecniche di Movimento Laterale presto Tecniche di Evasione presto Tecniche di Persistenza presto Tecniche di Escalation dei Privilegi presto Tecniche di Dump delle Credenziali presto Tecniche di Pivoting...

Kestrel

Kestrel BloodHound shows you the path. Kestrel shows you what's already inside. Everyone maps the same thing: the attack path - who can reach Domain Admin. It's the right question, and the tools that answer it are excellent. But a graph of "who can reach whom" is blind to an entire class of...

ADRecon

Scarica da https://github.com/adrecon/ADRecon ADRecon: Riconoscimento di Active Directory ADRecon è uno strumento che estrae e combina vari artefatti come evidenziato di seguito da un ambiente AD. Le informazioni possono essere presentate in un report Microsoft Excel appositamente formattato che...