Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
-
Updated
Apr 25, 2024 - PowerShell
相关标签
Here are 398 public repositories matching this topic...
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
windows security attack active-directory hacking cheatsheet enumeration activedirectory penetration-testing cheat pentesting exploitation hacking-tool privilege-escalation cheat-sheet hacking-tools windows-active-directory active-directory-cheatsheet active-directory-exploitation hacking-cheasheet
-
Updated
May 27, 2026
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
ldap active-directory acl activedirectory graph-theory infosec blueteam reconnaissance ad-audit acl-audit ldap-audit
-
Updated
May 8, 2026 - Go
Bloodhound Reporting for Blue and Purple Teams
neo4j directory active-directory bloodhound activedirectory penetration-testing active infosec cypher-query blueteam redteam purpleteam reporting-tool bloodhoundad bloodhoundad-cypher-queries purple-teams plumhound-tasks bloodhoundad-pathfinding-engine bluehound attack-paths
-
Updated
Nov 15, 2025 - Python
Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.
-
Updated
May 22, 2026 - PowerShell
A self-service password management tool for Active Directory
react recaptcha dotnet powershell dotnetcore password-manager password iis activedirectory ssl-certificate self-service password-meter application-pool
-
Updated
Jun 2, 2023 - C#
A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))
-
Updated
Aug 11, 2021
This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.
-
Updated
Feb 14, 2026 - PowerShell
Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.
security powershell hacking cybersecurity activedirectory penetration-testing infosec pentesting pentest cyber-security hacking-tool ethical-hacking web-application-security redteaming redteam cheetsheet penetration-testing-tools whitehat-hacker web-application-penetration-testing cybersecurity-tool
-
Updated
May 30, 2026 - PHP
A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.
-
Updated
Oct 18, 2025 - C#
This cheat sheet outlines common enumeration and attack methods for Windows Active Directory using PowerShell.
microsoft windows attack powershell ad tgs enumeration activedirectory kerberos bypass powerview tgt kerberos-authentication crtp admodule dcshadow
-
Updated
Apr 3, 2026
Active Directory Auditing and Enumeration
pentesting-windows active-directory cybersecurity activedirectory pentesting cyber-security pentest-scripts pentesting-tools cybersecurity-awareness enumeration-tool cyber-security-analysis active-directory-security active-directory-audit activedirectory-audit activedirectoryassesssment activedirectorysecurity cyber-security-tools active-directory-enumeration cybersecurity-audit active-directory-pentest
-
Updated
Jun 12, 2026 - PowerShell
Active Directory pentesting mind map
-
Updated
May 26, 2023
Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.
-
Updated
Jul 31, 2024 - Python
The Old BloodHound C# Ingestor (Deprecated)
-
Updated
Jun 22, 2022 - C#
Enable drop-in Windows Single Sign On for popular Java web servers.
-
Updated
Jun 15, 2026 - Java
Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.
python neo4j active-directory bloodhound python3 cybersecurity activedirectory py2neo blueteam redteam purpleteam
-
Updated
Jul 9, 2024 - Python
Make ORMs great again!
nodejs javascript mysql graphql activerecord ldap sql orm rest postgresql oracle activedirectory sqlite3
-
Updated
Jun 28, 2021 - JavaScript
AD Health Check, Send HTML Email, Ping machines, Encrypt Password,Bulk Password,Microsoft Teams,Monitor Certificate expiry, Monitor cert expiry, AD attributes, IP to Hostname, Export AD group, CSV to SQL,Shutdown, Restart, Local Admin, Disk Space, Account expiry,Restore Permissions, Backup permissions, Delete Files Older Than X-Days, export DHCP…
dns aws registry sql powershell azure dhcp ftp skype sftp password exchange teams activedirectory sharepoint office365 intune azuread distributiongroup systemadmin
-
Updated
Feb 16, 2025 - PowerShell
Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.
-
Updated
May 20, 2020 - Python