Tools

fuzzysecurity/standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

gdwnet/cve-2020-1350

A powershell script to deploy the registry mitigation key for CVE-2020-1350

mauricelambert/gpp-encrypt

This little script encrypts password to gpp cpassword. It useful to create vulnerable lab AD (CVE-2014-1812).

1r0bit/taskhound

Tool to enumerate privileged Scheduled Tasks on Remote Systems

iamstoxe/wirehole

WireHole is a combination of WireGuard, Pi-hole, and Unbound in a docker-compose project with the intent of enabling users to quickly and easily…

ghostpack/certify

C# tool for enumerating and exploiting misconfigurations in Active Directory Certificate Services (AD CS), enabling certificate template abuse,…

danmcinerney/icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

sense-of-security/adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current…

automatedlab/automatedlab

PowerShell-based provisioning framework for deploying complex lab environments on Hyper-V and Azure. Supports Windows, Linux, and products like AD,…

0xcub3/wblock

The next-generation ad blocker for Safari. Free and open source on macOS, iOS, iPadOS, and visionOS, with 750,000 rules, userscripts, userstyles, and…

gerenios/aadinternals

PowerShell module for administering and auditing Azure AD and Office 365, enabling token manipulation, user enumeration, and security assessments of…

c3c/adexplorersnapshot

Parses AD Explorer snapshots into BloodHound-compatible JSON or NDJSON for Active Directory reconnaissance and attack path mapping.

razvandimescu/numa

Portable DNS resolver in Rust — .numa local domains, ad blocking, developer overrides

ascit31/dark-moon

Autonomous AI pentesting engine, continuous offensive security across web, cloud, AD & Kubernetes. Agentic reasoning + real exploit execution deliver…

ad-security/ad_miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security…

spr-networks/super

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

ghostpack/pspkiaudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

bitsadmin/fakelogonscreen

Windows credential harvester that displays a fake logon screen, validates captured passwords against AD or local machine, and outputs them to console…