How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
PowerSploit is a collection of PowerShell modules designed for security assessment, penetration testing, and red team operations. It provides a framework for auditing Windows system configurations and evaluating the effectiveness of security defenses within an enterprise environment. The framework focuses on techniques that leverage native system administration tools and scripting environments to perform operations. It includes capabilities for executing arbitrary commands, escalating user privileges, and maintaining system persistence through event subscriptions. By utilizing in-memory execu
Rubeus is a comprehensive Kerberos attack toolkit for Active Directory environments, written in C#. It provides a full suite of operations for manipulating Kerberos tickets, exploiting delegation configurations, and performing credential attacks against Windows domains. The toolkit enables ticket extraction from logon sessions and memory, with real-time monitoring via Event Tracing for Windows. It supports forging golden and silver tickets with arbitrary privileges, as well as the creation of forged delegation contexts. Delegation attacks include abuse of constrained and unconstrained delegat
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
The main features of dafthack/mailsniper are: Exchange and Cloud Security, Microsoft Service Exploitation, PowerShell Tooling, Privilege Escalation Tools, Security Tooling, Social Engineering, Windows Security Utilities.
Projects with overlapping indexed features include: sensepost/ruler — A tool to abuse Exchange services. powershellmafia/powersploit — PowerSploit is a collection of PowerShell modules designed for security assessment, penetration testing, and red team… kevin-robertson/powermad — PowerShell MachineAccountQuota and DNS exploit tools. gdssecurity/windows-exploit-suggester — Windows-Exploit-Suggester is a security audit tool designed to scan Windows systems for outdated components and… kevin-robertson/inveigh — .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers. dafthack/domainpasswordspray — DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By…
