#夺旗赛 (CTF) 和网络安全资源#Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
翻译 - Nishang-进攻性PowerShell,用于红队,渗透测试和进攻性安全。
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
翻译 - 备忘单,其中包含Windows Active Directory的常见枚举和攻击方法。
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
Bloodhound Reporting for Blue and Purple Teams
翻译 - 蓝色和紫色团队的猎犬
A self-service password management tool for Active Directory
翻译 - 用于Active Directory的自助密码管理工具
Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.
翻译 - 组策略食用者是一个PowerShell模块,旨在收集有关组策略的信息,但也允许修复您可能在其中发现的问题。
A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 ...
This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Eve...
翻译 - 该PowerShell模块具有多种功能,但是该模块的签名功能之一是能够解析域控制器上的安全日志,从而提供对AD事件的易于使用的访问。
A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.
翻译 - 一个轻量级的工具,可以从Active Directory环境中快速提取有价值的信息,以进行攻击和防御。
This cheat sheet outlines common enumeration and attack methods for Windows Active Directory using PowerShell.
The Old BloodHound C# Ingestor (Deprecated)
Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backu...
Make ORMs great again!
Enable drop-in Windows Single Sign On for popular Java web servers.
Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.
Automated Active Directory Enumeration
Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.
Active Directory pentesting mind map
AD Health Check, Send HTML Email, Ping machines, Encrypt Password,Bulk Password,Microsoft Teams,Monitor Certificate expiry, Monitor cert expiry, AD attributes, IP to Hostname, Export AD group, CSV to...