My musings with PowerShell 神级脚本PowerShell-Suite

This repo is about Active Directory Advanced Threat Hunting

Super timeline all the things

Robust and practical application control for Windows

AD Scripts

Active Directory Pentesting Full Course - Red Team Hacking

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync).

Get-AADUserLastSignIn.ps1 is a PowerShell script retrieves Azure AD users with their last sign in date.

StandIn is a small .NET35/45 AD post-exploitation toolkit

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

AD ACLs with readable rights, flexible LDAP and no AD module needed

Community repository for access control DSC resources

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

Intune managed Secured workstation

Visual Studio Code

CERT/CC's fork of Metasploit Framework in which we are tagging commits that include vulnerability IDs. The first commit for an ID we recognize gets the tag for that ID. Aside from adding git tags, …

Repo for all the OWASP-SKF Docker lab examples

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Conversion tool used to Convert Group Policy baselines into DSC

Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.

Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber

My musings with PowerShell

A collection of Azure AD/Entra tools for offensive and defensive security purposes

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Common Vulnerabilities and Exposures - Portal. Archived and now replaced by vulnerability-lookup.org

cve-search - a tool to perform local searches for known vulnerabilities

Repo with getting started projects for the Microsoft Security Updates API (msrc.microsoft.com/update-guide)

MSRC Engage API