CVE-2024-49112 LDAP RCE PoC and Metasploit Module

AppContainer tools for launching sandboxed win32 apps, changing ACL permissions and learning from ETW traces.

LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113

TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and penetration tests with the tokens generated working out of t…

Fork of BloodHound with PKI nodes and edges for Certipy along with some minor personal improvements

The cActiveDirectorySecurity module contains PowerShell Functions which are designed to report on and manipulate Access Control Lists on Active Directory Objects in an intuitive manner.

A beautiful cookbook with recipes from around the cloud native community.

Windows batch script that finds misconfiguration issues which can lead to privilege escalation.

Windows Event Log Knowledge Base

https://lolad-project.github.io/

Module for managing configuration contexts for Active Directory

PowerShell module to manage forest level Active Directory resources

PowerShell module to manage domain controllers & initial domain deployments

PowerShell module to manage domain level Active Directory resources

PowerShell module to manage forest level Active Directory resources

Hunt for anomalies, excessive permissions & potential backdoors in WMI namepaces

Validates priv escalation of AD trusts

A repository of Maker Skill Trees and templates to make your own.

RunasCs - Csharp and open version of windows builtin runas.exe

Various tools and helpers to read assembly metadata.

Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domain joined machies

An Ansible collection that installs an ADFS deployment with optional configurations.

PowerShell module to interact with Active Directory using ADSI and the System.DirectoryServices namespace (.NET Framework)

Powershell script to build active directory forest and populate AD with random AD objects including AD users objects, computers objects, groups objects, GPOs and network shares required. It also ad…

Splice enables Microsoft Active Directory domain joins from any network.

PowerShell module delivering a lot of Active Directory Forest/Domain information

Monitor changes in Active Directory with replication metadata

Mastering Active Directory, Third Edition , Published by Packt

Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.