ad-password-protection

Lithnet Password Protection para Active Directory LPP mejora las opciones disponibles para una organización que desea garantizar que todas sus cuentas de Active Directory tengan contraseñas seguras. LPP es un módulo que se instala en los servidores de Active Directory y utiliza un filtro de...

Group3r

por Mike Loss @mikeloss con ayuda de @LukeHealy, @Sh3r4 y @LegendOfLynkle El desarrollo de Group3r fue generosamente apoyado por mi empleador anterior: VALE, PERO ¿QUÉ HACE? Como sus antepasados, Group3r es una herramienta para pentesters y red teamers para enumerar rápidamente configuraciones...

GPOZaurr

...

DisableSMBCompression

DisableSMBCompression CVE-2020-0796 Flaw Mitigation - Active Directory Administrative Templates The little we know about the new SMB3 flaw, is that we've been provided this mitigation for SMB3 servers: root@kitploit: Set-ItemProperty -Path...

gpblib

GPBLib GPBLib contains the common code used by the GroupPolicyBackdoor, OUned and GPOddity projects for GPO manipulations. The migration of the tools to the use of the present library is still in progress...

Grouper

Grouper NO USES MÁS GROUPER. ¡USA GROUPER2! https://github.com/l0ss/Grouper2 Un script de PowerShell para ayudar a encontrar configuraciones vulnerables en la Directiva de Grupo de Active Directory. Foto de Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 -...

GPOddity

GPOddity El proyecto GPOddity, cuyo objetivo es automatizar los vectores de ataque a GPO mediante NTLM relaying y más. Para más detalles sobre el ataque y una demostración de cómo usar la herramienta, consulte el artículo asociado disponible en:...

GPOHound

GPOHound GPOHound es una herramienta para volcar y analizar Objetos de directiva de grupo GPO extraídos del recurso compartido SYSVOL. Proporciona un formato estructurado y formalizado para ayudar a descubrir configuraciones incorrectas, ajustes inseguros y rutas de escalada de privilegios en...

gpoParser

gpoParser gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects GPOs in an Active Directory environment. Since enumerating these settings can be tedious and time-consuming, this tool provides a clearer understanding of applied policies and helps...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse es una aplicación .NET escrita en C que puede utilizarse para aprovechar los derechos de edición de un usuario sobre un Objeto de Directiva de Grupo GPO con el fin de comprometer los objetos controlados por ese GPO. Se pueden encontrar más detalles en la siguiente...

CVE-2022-30190_Temporary_Fix

🩹Solución temporal para CVE-2022-30190🩹 Estos son dos scripts de Python compilados para aplicar fácil y rápidamente una protección temporal contra la vulnerabilidad CVE-2022-30190 Follina Ambos se pueden programar mejor, pero esto es solo para implementarlo lo más rápido posible y lo hice sin...

BadSamba

DESCRIPTION This module is used to exploit startup script execution through Windows Group Policy settings when configured to run off of a remote SMB share. Windows Group Policy can be used to configure startup scripts that will execute each time the operating system powers on. These scripts execu...

GPOCrack

GPOCRACK.py Active Directory Group Policy Preferences cpassword cracker/decrypter. How to use python2 gpocrack.py cGc4817iMQclr1Ssixv35UpaH/FXy+1s5FnM2RqD4BI...

Find-WSUS

🧭 Find-WSUS Descubra configuraciones de servidores WSUS en todos los Objetos de directiva de grupo GPO — incluidas las Preferencias de directiva de grupo GPP ocultas. Find-WSUS es un script de PowerShell diseñado para profesionales de la seguridad y administradores de sistemas con el fin de...

onelogon

Onelogon: Taking over Active Directory Accounts via Netlogon This repository contains code and data accompanying our paper Onelogon: Taking over Active Directory Accounts via Netlogon WOOT'26. 1. Context 2. How to Cite 3. Artifact Structure and Setup 4. Setting Up a Test Environment 5. Scanning f...

CVE-2026-19608

A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access control to resources. The issue occurs when the system evaluates group-based policies using tokens that only contain group names rather than full paths. If two groups in...

CVE-2026-19608 Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy path-specific group policies

A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access control to resources. The issue occurs when the system evaluates group-based policies using tokens that only contain group names rather than full paths. If two groups in...

EUVD-2026-60581

A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access control to resources. The issue occurs when the system evaluates group-based policies using tokens that only contain group names rather than full paths. If two groups in...

CVE-2026-19608

A flaw in the group policy provider of Keycloak authorization services allows unauthorized access to protected resources. The root cause is that group-based policy evaluation uses tokens containing only group names rather than full paths . When two groups in different parts of the organization hi...

CVE-2026-19608

A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access control to resources. The issue occurs when the system evaluates group-based policies using tokens that only contain group names rather than full paths. If two groups in...