A swiss army knife for pentesting networks

Bonobo Git Server for Windows is a web application you can install on your IIS and easily manage and connect to your git repositories. Go to homepage for release and more info.

Investigate malicious Windows logon by visualizing and analyzing Windows event log

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

Automate getting Domain Admin using Empire

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2019, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

RedSnarf is a pen-testing / red-teaming tool for Windows environments

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Directory Services Internals (DSInternals) PowerShell Module and Framework

PingCastle - Get Active Directory Security at 80% in 20% of the time

Modern tactical exploitation toolkit.

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

Provision a brand-new company with proper defaults in Windows, Offic365, and Azure

Building an Active Directory domain and hacking it

Bloodhound for Blue and Purple Teams

(l)user hunter using WinAPI calls only

👔 Enterprise Web application starter kit or template using Laravel

Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

OpenAM is an open access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security.

A (partial) Python rewriting of PowerSploit's PowerView

A Kerberos implementation built entirely in managed code.

An LDAP based Active Directory user and group enumeration tool

zBang is a risk assessment tool that detects potential privileged account threats

Timeline of Active Directory changes with replication metadata

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.