857 matches found
SharpGPOAbuse
SharpGPOAbuse SharpGPOAbuse is a .NET application written in C that can be used to take advantage of a user's edit rights on a Group Policy Object GPO in order to compromise the objects that are controlled by that GPO. More details can be found at the following blog post:...
GPOHound
GPOHound GPOHound is a tool for dumping and analysing Group Policy Objects GPOs extracted from the SYSVOL share. It provides a structured, formalized format to help uncover misconfigurations, insecure settings, and privilege escalation paths in Active Directory environments. The tool integrates...
ad-password-protection
Lithnet Password Protection for Active Directory LPP enhances the options available to an organization wanting to ensure that all their Active Directory accounts have strong passwords. LPP is a module that you install on your Active Directory servers that uses a password filter to inspect passwor...
Group3r
by Mike Loss @mikeloss with help from @LukeHealy, @Sh3r4, and @LegendOfLynkle Development of Group3r was generously supported by my previous employer: OK BUT WTF IS IT DO? Like its ancestors, Group3r is a tool for pentesters and red teamers to rapidly enumerate relevant settings in AD Group Polic...
CVE-2022-30190_Temporary_Fix
🩹CVE-2022-30190 Temporary Fix🩹 These are two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability Follina Both can be programmed better, but this is just to implement it as quickly as possible and I did it without much Python knowledge,...
GPOZaurr
GPOZaurr Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them. GPOZaurr provides 360 degrees of information about Group Policies and their settings. Just a single command Invoke-GPOZaurr provides...
Grouper
Grouper DONT USE GROUPER ANY MORE. USE GROUPER2! https://github.com/l0ss/Grouper2 A PowerShell script for helping to find vulnerable settings in AD Group Policy. Photo by Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 - https://creativecommons.org/licenses/by-sa/2.0/ Summary Grouper...
ldeep
============== Project Status .. image:: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml/badge.svg :target: https://github.com/franc-pentest/ldeep/actions/workflows/python-test.yml :alt: Build status .. image:: https://badgen.net/pypi/v/ldeep :target:...
onelogon
Onelogon: Taking over Active Directory Accounts via Netlogon This repository contains code and data accompanying our paper Onelogon: Taking over Active Directory Accounts via Netlogon WOOT'26. 1. Context 2. How to Cite 3. Artifact Structure and Setup 4. Setting Up a Test Environment 5. Scanning f...
DisableSMBCompression
DisableSMBCompression CVE-2020-0796 Flaw Mitigation - Active Directory Administrative Templates The little we know about the new SMB3 flaw, is that we've been provided this mitigation for SMB3 servers: Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters"...
Find-WSUS
🧭 Find-WSUS Discover WSUS server configurations across Group Policy Objects GPOs — including hidden Group Policy Preferences GPP. Find-WSUS is a PowerShell script designed for security professionals and system administrators to identify all WSUS Windows Server Update Services server URLs configur...
GPOddity
GPOddity The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying and more. For more details regarding the attack and a demonstration on how to use the tool, see the associated article available at:...
gpblib
GPBLib GPBLib contains the common code used by the GroupPolicyBackdoor, OUned and GPOddity projects for GPO manipulations...
BadSamba
DESCRIPTION This module is used to exploit startup script execution through Windows Group Policy settings when configured to run off of a remote SMB share. Windows Group Policy can be used to configure startup scripts that will execute each time the operating system powers on. These scripts execu...
GPOCrack
GPOCRACK.py Active Directory Group Policy Preferences cpassword cracker/decrypter. How to use python2 gpocrack.py cGc4817iMQclr1Ssixv35UpaH/FXy+1s5FnM2RqD4BI...
CVE-2026-83932
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally...
CVE-2026-100217
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...
CVE-2026-100217
A vulnerability exists in Windows Group Policy due to improper privilege management . This flaw allows an authorized attacker to perform a local privilege escalation . The issue is associated with CWE-862 (Missing Authorization) . While the documents do not provide specific technical details on t...
CVE-2026-83932
A heap-based buffer overflow exists in Windows Group Policy , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as High severity (CVSS 3.1 score of 7.8) due to its potential impact on confidentiality, integrity, and availability. No ...
