Identify the accounts most vulnerable to dictionary attacks

PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll.

POCs for CVE-2025-50154 and CVE-2025-59214, zero day vulnerabilities on windows file explorer disclosing NTLMv2-SSP without user interaction. It is a bypass for the CVE-2025-24054 Security Patch

Post-exploitation NTLM password hash extractor

Active Directory Audit LDAP not secure / SMB v1 / Kerberos delegation, kerberoasting, as rep roasting / NTLM protected user

PowerShell script to audit NTLM authentication events from Windows Security and NTLM Operational logs. Filters by NTLMv1/v2, failed logons, privileged sessions (4672), date ranges, and null sessions. Validates NTLM audit GPO settings. Targets localhost, remote servers, domain controllers, or an entire AD forest.

Uses PowerShell to convert a given string to its NT hash equivalent.

Generating MD4 and NT/NTLM Hashes in Powershell

NTLM hash calculator (MD4) for security testing and validation