{"slug": "windows", "title": "Windows", "description": "Tools and resources for popping those Windows boxes.", "sections": [{"title": "", "groups": [{"title": "Active Directory", "tools": [{"name": "Aced", "url": "https://github.com/garrettfoster13/aced", "description": "A tool to parse and resolve a single targeted Active Directory principal's DACL).", "repo": "garrettfoster13/aced", "_anchor": "aced", "_section": "", "_group": "Active Directory", "_tabs": ["active-directory"], "_tab_titles": ["Active Directory"], "_page": "/tools/aced/"}, {"name": "BadBlood", "url": "https://github.com/davidprowe/BadBlood", "description": "Fills a Microsoft Active Directory Domain with a structure and thousands of objects.", "repo": "davidprowe/BadBlood", "_anchor": "badblood", "_section": "", "_group": "Active Directory", "_tabs": ["active-directory"], "_tab_titles": ["Active Directory"], "_page": "/tools/badblood/"}, {"name": "BloodHound", "url": "https://github.com/BloodHoundAD/BloodHound", "description": "Six Degrees of Domain Admin.", "repo": "BloodHoundAD/BloodHound", "_anchor": "bloodhound", "_section": "", "_group": "Active Directory", "_tabs": ["active-directory"], "_tab_titles": ["Active Directory"], "_page": "/tools/bloodhound/"}, {"name": "Certify", "url": "https://github.com/GhostPack/Certify", "description": "Active Directory certificate abuse.", "repo": "GhostPack/Certify", "_anchor": "certify", "_section": "", "_group": "Active Directory", "_tabs": ["active-directory"], "_tab_titles": ["Active Directory"], "_page": "/tools/certify/"}, {"name": "CrackMapExec", "url": "https://github.com/byt3bl33d3r/CrackMapExec", "description": "A swiss army knife for pentesting networks.", "repo": "byt3bl33d3r/CrackMapExec", "_anchor": "crackmapexec", "_section": "", "_group": "Active Directory", "_tabs": ["active-directory"], "_tab_titles": ["Active Directory"], "_page": "/tools/crackmapexec/"}, {"name": "SCCMHunter", "url": "https://github.com/garrettfoster13/sccmhunter", "description": "tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.", "repo": "garrettfoster13/sccmhunter", "_anchor": "sccmhunter", "_section": "", "_group": "Active Directory", "_tabs": ["active-directory"], "_tab_titles": ["Active Directory"], "_page": "/tools/sccmhunter/"}, {"name": "WinPwn", "url": "https://github.com/S3cur3Th1sSh1t/WinPwn", "description": "Automation for internal Windows Penetrationtest / AD-Security.", "repo": "S3cur3Th1sSh1t/WinPwn", "_anchor": "winpwn", "_section": "", "_group": "Active Directory", "_tabs": ["active-directory"], "_tab_titles": ["Active Directory"], "_page": "/tools/winpwn/"}]}, {"title": "Bitlocker", "tools": [{"name": "Bitleaker", "url": "https://github.com/kkamagui/bitleaker", "description": "This tool can decrypt a BitLocker-locked partition with the TPM vulnerability.", "repo": "kkamagui/bitleaker", "_anchor": "bitleaker", "_section": "", "_group": "Bitlocker", "_tabs": ["bitlocker"], "_tab_titles": ["Bitlocker"], "_page": "/tools/bitleaker/"}]}, {"title": "Cheatsheets", "tools": [{"name": "LOLBAS", "url": "https://lolbas-project.github.io", "description": "Living Off The Land Binaries and Scripts.", "repo": "sqlmapproject/sqlmap", "_anchor": "lolbas", "_section": "", "_group": "Cheatsheets", "_tabs": ["cheatsheets"], "_tab_titles": ["Cheatsheets"], "_page": "/tools/sql-map/"}]}, {"title": "Credentials", "tools": [{"name": "LaZagne", "url": "https://github.com/AlessandroZ/LaZagne", "description": "Credentials recovery project.", "repo": "AlessandroZ/LaZagne", "_anchor": "lazagne", "_section": "", "_group": "Credentials", "_tabs": ["credentials"], "_tab_titles": ["Credentials"], "_page": "/tools/lazagne/"}, {"name": "Redsnarf", "url": "https://github.com/nccgroup/redsnarf", "description": "Tool for retrieving hashes and credentials from Windows workstations, servers and domain controllers using OpSec Safe Techniques.", "repo": "nccgroup/redsnarf", "_anchor": "redsnarf", "_section": "", "_group": "Credentials", "_tabs": ["credentials"], "_tab_titles": ["Credentials"], "_page": "/tools/redsnarf/"}, {"name": "SCOMDecrypt", "url": "https://github.com/nccgroup/SCOMDecrypt", "description": "Tool to decrypt stored RunAs credentials from SCOM servers.", "repo": "nccgroup/SCOMDecrypt", "_anchor": "scomdecrypt", "_section": "", "_group": "Credentials", "_tabs": ["credentials"], "_tab_titles": ["Credentials"], "_page": "/tools/scomdecrypt/"}]}, {"title": "Exchange", "tools": [{"name": "MailSniper", "url": "https://github.com/dafthack/MailSniper", "description": "A penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms.", "repo": "dafthack/MailSniper", "_anchor": "mailsniper", "_section": "", "_group": "Exchange", "_tabs": ["exchange"], "_tab_titles": ["Exchange"], "_page": "/tools/mailsniper/"}, {"name": "Ruler", "url": "https://github.com/sensepost/ruler", "description": "A tool to abuse Exchange services.", "repo": "sensepost/ruler", "_anchor": "ruler", "_section": "", "_group": "Exchange", "_tabs": ["exchange"], "_tab_titles": ["Exchange"], "_page": "/tools/ruler/"}]}, {"title": "Interprocess Communication", "tools": [{"name": "pipe-intercept", "url": "https://github.com/gabriel-sztejnworcel/pipe-intercept", "description": "Intercept Windows Named Pipes communication.", "repo": "gabriel-sztejnworcel/pipe-intercept", "_anchor": "pipe-intercept", "_section": "", "_group": "Interprocess Communication", "_tabs": ["interprocess-communication"], "_tab_titles": ["Interprocess Communication"], "_page": "/tools/pipe-intercept/"}]}, {"title": "Kerberos", "tools": [{"name": "Kerberoast", "url": "https://github.com/nidem/kerberoast", "description": "A series of tools for attacking MS Kerberos implementations.", "repo": "nidem/kerberoast", "_anchor": "kerberoast", "_section": "", "_group": "Kerberos", "_tabs": ["kerberos"], "_tab_titles": ["Kerberos"], "_page": "/tools/kerberoast/"}, {"name": "Pykek", "url": "https://github.com/mubix/pykek", "description": "A python library to manipulate KRB5-related data.", "repo": "mubix/pykek", "_anchor": "pykek", "_section": "", "_group": "Kerberos", "_tabs": ["kerberos"], "_tab_titles": ["Kerberos"], "_page": "/tools/pykek/"}, {"name": "Rubeus", "url": "https://github.com/GhostPack/Rubeus", "description": "A C\\# toolset for raw Kerberos interaction and abuses.", "repo": "GhostPack/Rubeus", "_anchor": "rubeus", "_section": "", "_group": "Kerberos", "_tabs": ["kerberos"], "_tab_titles": ["Kerberos"], "_page": "/tools/rubeus/"}]}, {"title": "Kernel", "tools": [{"name": "Fibratus", "url": "https://github.com/rabbitstack/fibratus", "description": "A modern tool for Windows kernel exploration and tracing with a focus on security.", "repo": "rabbitstack/fibratus", "_anchor": "fibratus", "_section": "", "_group": "Kernel", "_tabs": ["kernel"], "_tab_titles": ["Kernel"], "_page": "/tools/fibratus/"}, {"name": "Vergilius", "url": "https://www.vergiliusproject.com/", "description": "Take a look into the depths of.", "_anchor": "vergilius", "_section": "", "_group": "Kernel", "_tabs": ["kernel"], "_tab_titles": ["Kernel"], "_page": "/tools/vergilius/"}]}, {"title": "Memory", "tools": [{"name": "Blackbone", "url": "https://github.com/DarthTon/Blackbone", "description": "DLL scatter manual mapper.", "repo": "DarthTon/Blackbone", "_anchor": "blackbone", "_section": "", "_group": "Memory", "_tabs": ["memory"], "_tab_titles": ["Memory"], "_page": "/tools/blackbone/"}, {"name": "PPLdump", "url": "https://github.com/itm4n/PPLdump", "description": "Dump the memory of a PPL with a userland exploit.", "repo": "itm4n/PPLdump", "_anchor": "ppldump", "_section": "", "_group": "Memory", "_tabs": ["memory"], "_tab_titles": ["Memory"], "_page": "/tools/ppldump/"}]}, {"title": "Post Exploitation", "tools": [{"name": "CredNinja", "url": "https://github.com/Raikia/CredNinja", "description": "A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB.", "repo": "Raikia/CredNinja", "_anchor": "credninja", "_section": "", "_group": "Post Exploitation", "_tabs": ["post-exploitation"], "_tab_titles": ["Post Exploitation"], "_page": "/tools/credninja/"}, {"name": "Mimikatz", "url": "https://github.com/gentilkiwi/mimikatz", "description": "Experiments with Windows security.", "repo": "gentilkiwi/mimikatz", "_anchor": "mimikatz", "_section": "", "_group": "Post Exploitation", "_tabs": ["post-exploitation"], "_tab_titles": ["Post Exploitation"], "_page": "/tools/mimikatz/"}]}, {"title": "Powershell", "tools": [{"name": "iBombshell", "url": "https://github.com/Telefonica/ibombshell", "description": "Tool to deploy a post-exploitation prompt at any time.", "repo": "Telefonica/ibombshell", "_anchor": "ibombshell", "_section": "", "_group": "Powershell", "_tabs": ["powershell"], "_tab_titles": ["Powershell"], "_page": "/tools/ibombshell/"}, {"name": "Pentestly", "url": "https://github.com/praetorian-inc/pentestly", "description": "Python and Powershell internal penetration testing framework.", "repo": "praetorian-inc/pentestly", "_anchor": "pentestly", "_section": "", "_group": "Powershell", "_tabs": ["powershell"], "_tab_titles": ["Powershell"], "_page": "/tools/pentestly/"}, {"name": "Powershell Suite", "url": "https://github.com/FuzzySecurity/PowerShell-Suite", "description": "A collection of PowerShell utilities.", "repo": "FuzzySecurity/PowerShell-Suite", "_anchor": "powershell-suite", "_section": "", "_group": "Powershell", "_tabs": ["powershell"], "_tab_titles": ["Powershell"], "_page": "/tools/powershell-suite/"}, {"name": "Stracciatella", "url": "https://github.com/mgeeky/Stracciatella", "description": "OpSec-safe Powershell runspace from within C# with AMSI, Constrained Language Mode and Script Block Logging disabled at startup.", "repo": "mgeeky/Stracciatella", "_anchor": "stracciatella", "_section": "", "_group": "Powershell", "_tabs": ["powershell"], "_tab_titles": ["Powershell"], "_page": "/tools/stracciatella/"}]}, {"title": "RDP", "tools": [{"name": "PowerRemoteDesktop", "url": "https://github.com/DarkCoderSc/PowerRemoteDesktop", "description": "Remote Desktop entirely coded in PowerShell.", "repo": "DarkCoderSc/PowerRemoteDesktop", "_anchor": "powerremotedesktop", "_section": "", "_group": "RDP", "_tabs": ["rdp"], "_tab_titles": ["RDP"], "_page": "/tools/powerremotedesktop/"}, {"name": "SharpRDP", "url": "https://github.com/0xthirteen/SharpRDP", "description": "Remote Desktop Protocol .NET Console Application for Authenticated Command Execution.", "repo": "0xthirteen/SharpRDP", "_anchor": "sharprdp", "_section": "", "_group": "RDP", "_tabs": ["rdp"], "_tab_titles": ["RDP"], "_page": "/tools/sharprdp/"}]}, {"title": "RPC", "tools": [{"name": "rpcenum", "url": "https://github.com/s4vitar/rpcenum", "description": "Bash tool to extract info from a domain via RPCClient.", "repo": "s4vitar/rpcenum", "_anchor": "rpcenum", "_section": "", "_group": "RPC", "_tabs": ["rpc"], "_tab_titles": ["RPC"], "_page": "/tools/rpcenum/"}]}, {"title": "Scripts", "tools": [{"name": "LOLBAS", "url": "https://lolbas-project.github.io/#", "description": "Living Off The Land Binaries and Scripts.", "repo": "LOLBAS-Project/LOLBAS", "_anchor": "lolbas-2", "_section": "", "_group": "Scripts", "_tabs": ["scripts"], "_tab_titles": ["Scripts"], "_page": "/tools/lolbas/"}, {"name": "Macshift", "url": "https://github.com/nayuki/Macshift", "description": "Windows command-line application changes the MAC address of a given network adapter on the current machine to a random or given value.", "repo": "nayuki/Macshift", "_anchor": "macshift", "_section": "", "_group": "Scripts", "_tabs": ["scripts"], "_tab_titles": ["Scripts"], "_page": "/tools/macshift/"}, {"name": "Windows-Pentest", "url": "https://github.com/ankh2054/windows-pentest", "description": "Windows Pentest Scripts.", "repo": "ankh2054/windows-pentest", "_anchor": "windows-pentest", "_section": "", "_group": "Scripts", "_tabs": ["scripts"], "_tab_titles": ["Scripts"], "_page": "/tools/windows-pentest/"}]}]}], "tools": [{"name": "Aced", "url": "https://github.com/garrettfoster13/aced", "description": "A tool to parse and resolve a single targeted Active Directory principal's DACL).", "category": "windows", "section": "", "group": "Active Directory", "repo": "garrettfoster13/aced", "links": [], "tags": [], "path": "/tools/aced/", "listing": "/windows/#aced"}, {"name": "BadBlood", "url": "https://github.com/davidprowe/BadBlood", "description": "Fills a Microsoft Active Directory Domain with a structure and thousands of objects.", "category": "windows", "section": "", "group": "Active Directory", "repo": "davidprowe/BadBlood", "links": [], "tags": [], "path": "/tools/badblood/", "listing": "/windows/#badblood"}, {"name": "Bitleaker", "url": "https://github.com/kkamagui/bitleaker", "description": "This tool can decrypt a BitLocker-locked partition with the TPM vulnerability.", "category": "windows", "section": "", "group": "Bitlocker", "repo": "kkamagui/bitleaker", "links": [], "tags": [], "path": "/tools/bitleaker/", "listing": "/windows/#bitleaker"}, {"name": "Blackbone", "url": "https://github.com/DarthTon/Blackbone", "description": "DLL scatter manual mapper.", "category": "windows", "section": "", "group": "Memory", "repo": "DarthTon/Blackbone", "links": [], "tags": [], "path": "/tools/blackbone/", "listing": "/windows/#blackbone"}, {"name": "BloodHound", "url": "https://github.com/BloodHoundAD/BloodHound", "description": "Six Degrees of Domain Admin.", "category": "windows", "section": "", "group": "Active Directory", "repo": "BloodHoundAD/BloodHound", "links": [], "tags": [], "path": "/tools/bloodhound/", "listing": "/windows/#bloodhound"}, {"name": "Certify", "url": "https://github.com/GhostPack/Certify", "description": "Active Directory certificate abuse.", "category": "windows", "section": "", "group": "Active Directory", "repo": "GhostPack/Certify", "links": [], "tags": [], "path": "/tools/certify/", "listing": "/windows/#certify"}, {"name": "CrackMapExec", "url": "https://github.com/byt3bl33d3r/CrackMapExec", "description": "A swiss army knife for pentesting networks.", "category": "windows", "section": "", "group": "Active Directory", "repo": "byt3bl33d3r/CrackMapExec", "links": [], "tags": [], "path": "/tools/crackmapexec/", "listing": "/windows/#crackmapexec"}, {"name": "CredNinja", "url": "https://github.com/Raikia/CredNinja", "description": "A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB.", "category": "windows", "section": "", "group": "Post Exploitation", "repo": "Raikia/CredNinja", "links": [], "tags": [], "path": "/tools/credninja/", "listing": "/windows/#credninja"}, {"name": "Fibratus", "url": "https://github.com/rabbitstack/fibratus", "description": "A modern tool for Windows kernel exploration and tracing with a focus on security.", "category": "windows", "section": "", "group": "Kernel", "repo": "rabbitstack/fibratus", "links": [], "tags": [], "path": "/tools/fibratus/", "listing": "/windows/#fibratus"}, {"name": "iBombshell", "url": "https://github.com/Telefonica/ibombshell", "description": "Tool to deploy a post-exploitation prompt at any time.", "category": "windows", "section": "", "group": "Powershell", "repo": "Telefonica/ibombshell", "links": [], "tags": [], "path": "/tools/ibombshell/", "listing": "/windows/#ibombshell"}, {"name": "Kerberoast", "url": "https://github.com/nidem/kerberoast", "description": "A series of tools for attacking MS Kerberos implementations.", "category": "windows", "section": "", "group": "Kerberos", "repo": "nidem/kerberoast", "links": [], "tags": [], "path": "/tools/kerberoast/", "listing": "/windows/#kerberoast"}, {"name": "LaZagne", "url": "https://github.com/AlessandroZ/LaZagne", "description": "Credentials recovery project.", "category": "windows", "section": "", "group": "Credentials", "repo": "AlessandroZ/LaZagne", "links": [], "tags": [], "path": "/tools/lazagne/", "listing": "/windows/#lazagne"}, {"name": "LOLBAS", "url": "https://lolbas-project.github.io", "description": "Living Off The Land Binaries and Scripts.", "category": "windows", "section": "", "group": "Cheatsheets", "repo": "sqlmapproject/sqlmap", "links": [], "tags": [], "path": "/tools/sql-map/", "listing": "/windows/#lolbas"}, {"name": "LOLBAS", "url": "https://lolbas-project.github.io/#", "description": "Living Off The Land Binaries and Scripts.", "category": "windows", "section": "", "group": "Scripts", "repo": "LOLBAS-Project/LOLBAS", "links": [], "tags": [], "path": "/tools/lolbas/", "listing": "/windows/#lolbas-2"}, {"name": "Macshift", "url": "https://github.com/nayuki/Macshift", "description": "Windows command-line application changes the MAC address of a given network adapter on the current machine to a random or given value.", "category": "windows", "section": "", "group": "Scripts", "repo": "nayuki/Macshift", "links": [], "tags": [], "path": "/tools/macshift/", "listing": "/windows/#macshift"}, {"name": "MailSniper", "url": "https://github.com/dafthack/MailSniper", "description": "A penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms.", "category": "windows", "section": "", "group": "Exchange", "repo": "dafthack/MailSniper", "links": [], "tags": [], "path": "/tools/mailsniper/", "listing": "/windows/#mailsniper"}, {"name": "Mimikatz", "url": "https://github.com/gentilkiwi/mimikatz", "description": "Experiments with Windows security.", "category": "windows", "section": "", "group": "Post Exploitation", "repo": "gentilkiwi/mimikatz", "links": [], "tags": [], "path": "/tools/mimikatz/", "listing": "/windows/#mimikatz"}, {"name": "Pentestly", "url": "https://github.com/praetorian-inc/pentestly", "description": "Python and Powershell internal penetration testing framework.", "category": "windows", "section": "", "group": "Powershell", "repo": "praetorian-inc/pentestly", "links": [], "tags": [], "path": "/tools/pentestly/", "listing": "/windows/#pentestly"}, {"name": "pipe-intercept", "url": "https://github.com/gabriel-sztejnworcel/pipe-intercept", "description": "Intercept Windows Named Pipes communication.", "category": "windows", "section": "", "group": "Interprocess Communication", "repo": "gabriel-sztejnworcel/pipe-intercept", "links": [], "tags": [], "path": "/tools/pipe-intercept/", "listing": "/windows/#pipe-intercept"}, {"name": "PowerRemoteDesktop", "url": "https://github.com/DarkCoderSc/PowerRemoteDesktop", "description": "Remote Desktop entirely coded in PowerShell.", "category": "windows", "section": "", "group": "RDP", "repo": "DarkCoderSc/PowerRemoteDesktop", "links": [], "tags": [], "path": "/tools/powerremotedesktop/", "listing": "/windows/#powerremotedesktop"}, {"name": "Powershell Suite", "url": "https://github.com/FuzzySecurity/PowerShell-Suite", "description": "A collection of PowerShell utilities.", "category": "windows", "section": "", "group": "Powershell", "repo": "FuzzySecurity/PowerShell-Suite", "links": [], "tags": [], "path": "/tools/powershell-suite/", "listing": "/windows/#powershell-suite"}, {"name": "PPLdump", "url": "https://github.com/itm4n/PPLdump", "description": "Dump the memory of a PPL with a userland exploit.", "category": "windows", "section": "", "group": "Memory", "repo": "itm4n/PPLdump", "links": [], "tags": [], "path": "/tools/ppldump/", "listing": "/windows/#ppldump"}, {"name": "Pykek", "url": "https://github.com/mubix/pykek", "description": "A python library to manipulate KRB5-related data.", "category": "windows", "section": "", "group": "Kerberos", "repo": "mubix/pykek", "links": [], "tags": [], "path": "/tools/pykek/", "listing": "/windows/#pykek"}, {"name": "Redsnarf", "url": "https://github.com/nccgroup/redsnarf", "description": "Tool for retrieving hashes and credentials from Windows workstations, servers and domain controllers using OpSec Safe Techniques.", "category": "windows", "section": "", "group": "Credentials", "repo": "nccgroup/redsnarf", "links": [], "tags": [], "path": "/tools/redsnarf/", "listing": "/windows/#redsnarf"}, {"name": "rpcenum", "url": "https://github.com/s4vitar/rpcenum", "description": "Bash tool to extract info from a domain via RPCClient.", "category": "windows", "section": "", "group": "RPC", "repo": "s4vitar/rpcenum", "links": [], "tags": [], "path": "/tools/rpcenum/", "listing": "/windows/#rpcenum"}, {"name": "Rubeus", "url": "https://github.com/GhostPack/Rubeus", "description": "A C\\# toolset for raw Kerberos interaction and abuses.", "category": "windows", "section": "", "group": "Kerberos", "repo": "GhostPack/Rubeus", "links": [], "tags": [], "path": "/tools/rubeus/", "listing": "/windows/#rubeus"}, {"name": "Ruler", "url": "https://github.com/sensepost/ruler", "description": "A tool to abuse Exchange services.", "category": "windows", "section": "", "group": "Exchange", "repo": "sensepost/ruler", "links": [], "tags": [], "path": "/tools/ruler/", "listing": "/windows/#ruler"}, {"name": "SCCMHunter", "url": "https://github.com/garrettfoster13/sccmhunter", "description": "tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.", "category": "windows", "section": "", "group": "Active Directory", "repo": "garrettfoster13/sccmhunter", "links": [], "tags": [], "path": "/tools/sccmhunter/", "listing": "/windows/#sccmhunter"}, {"name": "SCOMDecrypt", "url": "https://github.com/nccgroup/SCOMDecrypt", "description": "Tool to decrypt stored RunAs credentials from SCOM servers.", "category": "windows", "section": "", "group": "Credentials", "repo": "nccgroup/SCOMDecrypt", "links": [], "tags": [], "path": "/tools/scomdecrypt/", "listing": "/windows/#scomdecrypt"}, {"name": "SharpRDP", "url": "https://github.com/0xthirteen/SharpRDP", "description": "Remote Desktop Protocol .NET Console Application for Authenticated Command Execution.", "category": "windows", "section": "", "group": "RDP", "repo": "0xthirteen/SharpRDP", "links": [], "tags": [], "path": "/tools/sharprdp/", "listing": "/windows/#sharprdp"}, {"name": "Stracciatella", "url": "https://github.com/mgeeky/Stracciatella", "description": "OpSec-safe Powershell runspace from within C# with AMSI, Constrained Language Mode and Script Block Logging disabled at startup.", "category": "windows", "section": "", "group": "Powershell", "repo": "mgeeky/Stracciatella", "links": [], "tags": [], "path": "/tools/stracciatella/", "listing": "/windows/#stracciatella"}, {"name": "Vergilius", "url": "https://www.vergiliusproject.com/", "description": "Take a look into the depths of.", "category": "windows", "section": "", "group": "Kernel", "repo": null, "links": [], "tags": [], "path": "/tools/vergilius/", "listing": "/windows/#vergilius"}, {"name": "Windows-Pentest", "url": "https://github.com/ankh2054/windows-pentest", "description": "Windows Pentest Scripts.", "category": "windows", "section": "", "group": "Scripts", "repo": "ankh2054/windows-pentest", "links": [], "tags": [], "path": "/tools/windows-pentest/", "listing": "/windows/#windows-pentest"}, {"name": "WinPwn", "url": "https://github.com/S3cur3Th1sSh1t/WinPwn", "description": "Automation for internal Windows Penetrationtest / AD-Security.", "category": "windows", "section": "", "group": "Active Directory", "repo": "S3cur3Th1sSh1t/WinPwn", "links": [], "tags": [], "path": "/tools/winpwn/", "listing": "/windows/#winpwn"}]}