How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
PowerSploit is a collection of PowerShell modules designed for security assessment, penetration testing, and red team operations. It provides a framework for auditing Windows system configurations and evaluating the effectiveness of security defenses within an enterprise environment. The framework focuses on techniques that leverage native system administration tools and scripting environments to perform operations. It includes capabilities for executing arbitrary commands, escalating user privileges, and maintaining system persistence through event subscriptions. By utilizing in-memory execu
Rubeus is a comprehensive Kerberos attack toolkit for Active Directory environments, written in C#. It provides a full suite of operations for manipulating Kerberos tickets, exploiting delegation configurations, and performing credential attacks against Windows domains. The toolkit enables ticket extraction from logon sessions and memory, with real-time monitoring via Event Tracing for Windows. It supports forging golden and silver tickets with arbitrary privileges, as well as the creation of forged delegation contexts. Delegation attacks include abuse of constrained and unconstrained delegat
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
The main features of dafthack/mailsniper are: Exchange and Cloud Security, Microsoft Service Exploitation, PowerShell Tooling, Privilege Escalation Tools, Security Tooling, Social Engineering, Windows Security Utilities.
Open-source alternatives to dafthack/mailsniper include: sensepost/ruler — A tool to abuse Exchange services. powershellmafia/powersploit — PowerSploit is a collection of PowerShell modules designed for security assessment, penetration testing, and red team… kevin-robertson/powermad — PowerShell MachineAccountQuota and DNS exploit tools. gdssecurity/windows-exploit-suggester — Windows-Exploit-Suggester is a security audit tool designed to scan Windows systems for outdated components and… kevin-robertson/inveigh — .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers. dafthack/domainpasswordspray — DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By…
