34 entries
| Tool | Description | Section | Links | Last Updated |
|---|---|---|---|---|
| Acedgarrettfoster13/aced | A tool to parse and resolve a single targeted Active Directory principal's DACL). | Active Directory | GitHub★ 204 |
1y ago |
| BadBlooddavidprowe/BadBlood | Fills a Microsoft Active Directory Domain with a structure and thousands of objects. | Active Directory | GitHub★ 2.3k |
3y ago |
| Bitleakerkkamagui/bitleaker | This tool can decrypt a BitLocker-locked partition with the TPM vulnerability. | Bitlocker | GitHub★ 228 |
4y ago |
| BlackboneDarthTon/Blackbone | DLL scatter manual mapper. | Memory | GitHub★ 5.5k |
2y ago |
| BloodHoundBloodHoundAD/BloodHound | Six Degrees of Domain Admin. | Active Directory | GitHub★ 10.6k |
8mo ago |
| CertifyGhostPack/Certify | Active Directory certificate abuse. | Active Directory | GitHub★ 2k |
1mo ago |
| CrackMapExecbyt3bl33d3r/CrackMapExec | A swiss army knife for pentesting networks. | Active Directory | GitHub★ 9.2k |
Archived |
| CredNinjaRaikia/CredNinja | A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale via SMB. | Post Exploitation | GitHub★ 449 |
4y ago |
| Fibratusrabbitstack/fibratus | A modern tool for Windows kernel exploration and tracing with a focus on security. | Kernel | GitHub★ 2.6k |
1d ago |
| iBombshellTelefonica/ibombshell | Tool to deploy a post-exploitation prompt at any time. | Powershell | GitHub★ 320 |
Archived |
| Kerberoastnidem/kerberoast | A series of tools for attacking MS Kerberos implementations. | Kerberos | GitHub★ 1.5k |
3y ago |
| LaZagneAlessandroZ/LaZagne | Credentials recovery project. | Credentials | GitHub★ 11k |
1y ago |
| LOLBASsqlmapproject/sqlmap | Living Off The Land Binaries and Scripts. | Cheatsheets | 1d ago | |
| LOLBASLOLBAS-Project/LOLBAS | Living Off The Land Binaries and Scripts. | Scripts | 1mo ago | |
| Macshiftnayuki/Macshift | Windows command-line application changes the MAC address of a given network adapter on the current machine to a random or given value. | Scripts | GitHub★ 7 |
2y ago |
| MailSniperdafthack/MailSniper | A penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms. | Exchange | GitHub★ 3.3k |
1mo ago |
| Mimikatzgentilkiwi/mimikatz | Experiments with Windows security. | Post Exploitation | GitHub★ 22k |
6d ago |
| Pentestlypraetorian-inc/pentestly | Python and Powershell internal penetration testing framework. | Powershell | GitHub★ 719 |
Archived |
| pipe-interceptgabriel-sztejnworcel/pipe-intercept | Intercept Windows Named Pipes communication. | Interprocess Communication | GitHub★ 307 |
1y ago |
| PowerRemoteDesktopDarkCoderSc/PowerRemoteDesktop | Remote Desktop entirely coded in PowerShell. | RDP | GitHub★ 2.2k |
2y ago |
| Powershell SuiteFuzzySecurity/PowerShell-Suite | A collection of PowerShell utilities. | Powershell | GitHub★ 2.7k |
4y ago |
| PPLdumpitm4n/PPLdump | Dump the memory of a PPL with a userland exploit. | Memory | GitHub★ 890 |
Archived |
| Pykekmubix/pykek | A python library to manipulate KRB5-related data. | Kerberos | GitHub★ 164 |
11y ago |
| Redsnarfnccgroup/redsnarf | Tool for retrieving hashes and credentials from Windows workstations, servers and domain controllers using OpSec Safe Techniques. | Credentials | GitHub★ 1.2k |
6y ago |
| rpcenums4vitar/rpcenum | Bash tool to extract info from a domain via RPCClient. | RPC | GitHub★ 165 |
2y ago |
| RubeusGhostPack/Rubeus | A C\# toolset for raw Kerberos interaction and abuses. | Kerberos | GitHub★ 5.2k |
5mo ago |
| Rulersensepost/ruler | A tool to abuse Exchange services. | Exchange | GitHub★ 2.3k |
2y ago |
| SCCMHuntergarrettfoster13/sccmhunter | tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain. | Active Directory | GitHub★ 962 |
8d ago |
| SCOMDecryptnccgroup/SCOMDecrypt | Tool to decrypt stored RunAs credentials from SCOM servers. | Credentials | GitHub★ 131 |
2y ago |
| SharpRDP0xthirteen/SharpRDP | Remote Desktop Protocol .NET Console Application for Authenticated Command Execution. | RDP | GitHub★ 1.2k |
3mo ago |
| Stracciatellamgeeky/Stracciatella | OpSec-safe Powershell runspace from within C# with AMSI, Constrained Language Mode and Script Block Logging disabled at startup. | Powershell | GitHub★ 544 |
4y ago |
| Vergiliusvergiliusproject.com | Take a look into the depths of. | Kernel | — | |
| Windows-Pentestankh2054/windows-pentest | Windows Pentest Scripts. | Scripts | GitHub★ 233 |
8y ago |
| WinPwnS3cur3Th1sSh1t/WinPwn | Automation for internal Windows Penetrationtest / AD-Security. | Active Directory | GitHub★ 3.7k |
1y ago |
Nothing matches that filter. Suggest a tool?