How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts (Petitpotam) and relaying to the certificate service.
BloodHound is a graph-based security analysis tool designed to map trust relationships and attack vectors within Active Directory environments. It functions as an attack path mapper and risk assessment system that uses graph theory to identify hidden relationships and paths leading to high-privilege accounts. The tool specializes in network attack surface mapping and privilege escalation pathfinding. It quantifies security risks by measuring the reliability of attack paths to critical targets, allowing for the prioritization of vulnerability elimination. The system provides capabilities for
StandIn is a small AD post-compromise toolkit. StandIn came about because recently at xforcered we needed a .NET native solution to perform resource based constrained delegation. However, StandIn quickly ballooned to include a number of comfort features.
This repo contains updates to the original concept and code by Prashant Mahajan (@prashant3535) while working at Sense of Security.
New monitoring and defense optics are being applied within Microsoft operating systems and security products. This should help defenders in detecting malicious behavior within their environments. While PowerShell has long been very popular for post exploitation, now it’s something attackers try…
The main features of outflanknl/recon-ad are: Domain Situational Awareness.
Projects with overlapping indexed features include: adrecon/adrecon — This repo contains updates to the original concept and code by Prashant Mahajan (@prashant3535) while working at Sense… bats3c/adcspwn — A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts… bloodhoundad/bloodhound — BloodHound is a graph-based security analysis tool designed to map trust relationships and attack vectors within… fuzzysecurity/standin — StandIn is a small AD post-compromise toolkit. StandIn came about because recently at xforcered we needed a .NET… ghostpack/pspkiaudit — PowerShell toolkit for auditing Active Directory Certificate Services (AD CS). improsec/improhound — Identify the attack paths in BloodHound breaking your AD tiering.