Chris Titus Tech's Windows Utility - Install Programs, Tweaks, Fixes, and Updates

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

game of active directory

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAR…

Azure Security Resources and Notes

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

An introduction to Active Directory security

This repo is about Active Directory Advanced Threat Hunting

A PowerShell script that automates the security assessment of Microsoft 365 environments.

ScriptSentry finds misconfigured and dangerous logon scripts.

Lab used for workshop and CTF

Amsi Bypass payload that works on Windwos 11

LudusHound is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment via Ludus for controlled testing.

A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory

Assorted scripts and one off things

Patch AMSI and ETW

Use to build an anonymous SMB file server.

A proof of concept on attack vectors against Active Directory by abusing Active Directory Certificate Services (ADCS)

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

Active Directory Cheat Sheet

Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.

The great Microsoft exchange hack: A penetration tester’s guide (exchange penetration testing)

Material for the "Hands-On BloodHound" Workshop