12421 matches found
WiFi-SpiderWeb
WiFi-SpiderWeb V2.0 β OpenWrt Active Cyber Defense & Honeypot Ecosystem Dynamic Wi-Fi Deauthentication Detector, Active Countermeasures Engine & Real-Time Web Dashboard with RSSI Triangulation Radar. Designed for low-resource OpenWrt routers running completely from USB ExtRoot. --- ποΈ Advanced...
Adalanche
Adalanche Open Source Attack Graph Visualizer and Explorer Adalanche gives instant results, showing you what permissions users and groups have in an Active Directory. It is useful for visualizing and exploring who can take over accounts, machines or the entire domain, and can be used to find and...
vulnerable-AD
Vulnerable-AD Create a vulnerable active directory that's allowing you to test most of active directory attacks in local lab Main Features Randomize Attacks Full Coverage of the mentioned attacks you need run the script in DC with Active Directory installed Some of attacks require client...
pingcastle
PingCastle by Netwrix Stay Connected & Contribute We welcome all PingCastle users: open source contributors, IT admins, and security professionals, to get involved and help shape the future of PingCastle. Join the Netwrix Community : community.netwrix.com Get announcements, view the roadmap, subm...
ivre
IVRE IVRE Instrument de veille sur les rΓ©seaux extΓ©rieurs or DRUNK Dynamic Recon of UNKnown networks is a network recon framework, including tools for passive and active recon. IVRE can use data from: Passive tools: Zeek Argus Nfdump p0f airodump-ng Active tools: Nmap Masscan ZGrab2 ZDNS Nuclei...
flashingestor
flashingestor A TUI for Active Directory collection. Philosophy The main goals of this project are: 1. Be a full data ingestor compatible with BloodHound CE Community Edition 2. Be faster, less noisy, and more customizable than other collectors 3. Provide a friendly TUI terminal user interface wi...
kerbrute
Kerbrute A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication Grab the latest binaries from the releases page to get started. Background This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing using the...
Invoke-ADEnum
Invoke-ADEnum Active Directory Auditing and Enumeration Invoke-ADEnum is an auditing and enumeration tool designed to automate the collection of information from an Active Directory environment. One of the features of Invoke-ADEnum is its ability to generate an Active Directory Audit Report in HT...
dc-sonar
DC Sonar Community Repositories The project consists of repositories: dc-sonar-frontend dc-sonar-user-layer dc-sonar-workers-layer ntlm-scrutinizer Disclaimer It's only for education purposes. Avoid using it on the production Active Directory AD domain. Neither contributor incur any responsibilit...
ketshash
Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...
monkey365
Monkey365 is an open-source security assessment framework for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals, consultants, administrators, and incident responders identify misconfigurations, review cloud security posture, and evaluate environments against industry...
PyADRecon
Python3 implementation of an improved ADRecon for Pentesters and Blue Teams. ADRecon is a tool which gathers information about MS Active Directory and generates an XSLX report to provide a holistic picture of the current state of the target AD environment. !TIP If you are a Red Team, may check ou...
LogonTracer
Concept LogonTracer v2 is a tool to investigate malicious logon by visualizing and analyzing Windows Active Directory event logs. This tool associates a host name or an IP address and account name found in logon-related events and displays it as a graph. This way, it is possible to see in which...
redsnarf
. \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and domain controllers...
Find-AdminAccess
FindAdminAccess A C utility that enumerates domain computers and tests administrative access to them, including connectivity checks, admin privileges verification, and C$ share writability testing. Features Enumerate all computers in an Active Directory domain Test network connectivity Verify...
skewrun
Skewrun skewrun is an Active Directory time discovery toolkit for red teams. It dynamically resolves the Domain Controller's time via network protocols CLDAP, SMB, NTP, Kerberos, NTLM and executes commands via libfaketime LDPRELOAD, tricking the executed binary into using the exact DC time. This...
ADTrapper
ADTrapper - Active Directory Security Analysis Platform Professional Active Directory Security Analysis and Threat Detection Platform Transform Windows authentication logs into actionable security insights with advanced threat detection and interactive visualizations Overview ADTrapper is a...
ADLab
AD Penetration Testing Lab Author: @browninfosecguy Version: 1.0 Usage: This Script can be used to configure both Domain Controller and Workstation. OPTIONS APPLICABLE TO SERVER: Option 1: Configure machine name and static IP address for the Domain Controller. Option 2: Install the "Active...
Kestrel
Kestrel BloodHound shows you the path. Kestrel shows you what's already inside. Everyone maps the same thing: the attack path - who can reach Domain Admin. It's the right question, and the tools that answer it are excellent. But a graph of "who can reach whom" is blind to an entire class of...
ridrelay
RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...