#Active Directory

Active Directory Pentesting CheatSheet.

ESC1 - Abuse Active Directory Certificate Services.

ADExplorerSnapshot.py is an AD Explorer snapshot ingestor for BloodHound.

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment..

adPEAS is a Powershell tool to automate Active Directory enumeration.

BadBlood fills a Microsoft Active Directory Domain with a structure and thousands of objects.

List of Exchange versions, build numbers and release dates for major releases (RTM, Service Packs) as well as Cumulative Updates and Rollups.

A fast enumeration tool for Windows Active Directory Pentesting written in Go.

Uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment.

Python based ingestor for BloodHound.

Triggers RPC call using SpoolService bug.

Tool for pentesters to help find security-related misconfigurations in Active Directory Group Policy.

Most handy Windows Security Log Event ID's

GoodHound operationalises Bloodhound by determining the busiest paths to high value targets and creating actionable output to prioritise remediation of attack paths.

In-depth ldap enumeration utility.

Swiss-Army knife for Active Directory Pentesting using Linux.

Utility to play with ADCS, allows to request tickets and collect information about related objects.

Active Directory certificate abuse.

Active Directory Certificate Services enumeration and abuse.

A C# project that performs a number of security oriented host-survey 'safety checks' relevant from both offensive and defensive security perspectives.

PingCastle - Get Active Directory Security at 80% in 20% of the time.

Python3 terminal application that contains 260+ Neo4j cyphers for BloodHound data sets.

This tool is designed to assist in quickly bruteforcing valid Active Directory accounts through Kerberos Pre-Authentication.

Dump LAPS Passwords.

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object.

LDAP Password Hunter is a tool which wraps features of getTGT.py (Impacket) and ldapsearch in order to look up for password stored in LDAP database.

Active Directory information dumper via LDAP.

Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP).

A GoLang tool to enumerate and abuse LDAP. Made simple.

A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication.

Active Directory LDAP Enumerator - Python3 script to quickly get various information from a domain controller through his LDAP service.

Just another Powerview alternative.