Stars
Automation for internal Windows Penetrationtest / AD-Security
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
Azure Security Resources and Notes
PowerShell MachineAccountQuota and DNS exploit tools
My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+
Microsoft signed ActiveDirectory PowerShell module
PowerShell Remote Download Cradle Generator & Obfuscator
A script for advanced discovery of Privileged Accounts - includes Shadow Admins
Tooling for assessing an Azure AD tenant state and configuration
SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
Tools for discovery and abuse of COM hijacks
Load any Beacon Object File using Powershell!
Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls on their behalf.
A proof of concept on attack vectors against Active Directory by abusing Active Directory Certificate Services (ADCS)
A technique for Active Directory domain persistence