21 Repos
Tools for auditing, mapping, and exploiting Active Directory environments.
Explore 21 awesome GitHub repositories matching part of an awesome list · Active Directory Auditing. Refine with filters or upvote what's useful.
BloodHound is a graph-based security analysis tool designed to map trust relationships and attack vectors within Active Directory environments. It functions as an attack path mapper and risk assessment system that uses graph theory to identify hidden relationships and paths leading to high-privilege accounts. The tool specializes in network attack surface mapping and privilege escalation pathfinding. It quantifies security risks by measuring the reliability of attack paths to critical targets, allowing for the prioritization of vulnerability elimination. The system provides capabilities for
Visualizes attack paths in Active Directory environments.
Tool for Active Directory Certificate Services enumeration and abuse
Python tool for auditing and abusing AD Certificate Services.
Certify is a C# tool to enumerate and abuse misconfigurations in Active Directory Certificate Services (AD CS).
Identifies and exploits misconfigurations in AD Certificate Services.
Extracts and dumps Active Directory information via LDAP.
Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory
Audits Access Control Lists within Active Directory.
SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
Chains authentication relaying to forge Kerberos tickets.
PowerShell toolkit for auditing Active Directory Certificate Services (AD CS).
Audits Active Directory Certificate Services security.
A script for advanced discovery of Privileged Accounts - includes Shadow Admins
Identifies privileged accounts and risky permissions.
Custom queries to enhance attack path discovery.
Automates exploitation of weak Active Directory permissions.
C# implementation for manipulating Active Directory objects.
Discovers potential delegation attack paths in domains.
Collects data for Active Directory attack path analysis.
Additional queries for mapping complex domain relationships.