Active Directory Open Source Projects

A swiss army knife for pentesting networks

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

The Network Execution Tool

Investigate malicious Windows logon by visualizing and analyzing Windows event log

PingCastle - Get Active Directory Security at 80% in 20% of the time

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Modern Confluence alternative designed for internal & external docs, built with Go + EmberJS

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

Directory Services Internals (DSInternals) PowerShell Module and Framework

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Bonobo Git Server for Windows is a web application you can install on your IIS and easily manage and connect to your git repositories. Go to homepage for release and more info.

Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

A small tool built to detect and fix common misconfigurations in Active Directory Certificate Services.

AD Security Intrusion Detection System

Bloodhound Reporting for Blue and Purple Teams

Red Team Cheatsheet in constant expansion.

a list of 350+ Free TryHackMe rooms to start learning cybersecurity with THM

RedSnarf is a pen-testing / red-teaming tool for Windows environments

Dominate Active Directory with PowerShell.

Active Directory Integrated DNS dumping by any authenticated user

Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀

A (partial) Python rewriting of PowerSploit's PowerView

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers

A complete terminal user interface (TUI) for LDAP.

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

Modern tactical exploitation toolkit.

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

Pinniped is the easy, secure way to log in to your Kubernetes clusters.

Repository with the scripts that I have used in my blogs on https://powershellisfun.com. If you like these, please sponsor this project using the Sponsor button below or buy me a coffee :) https://www.buymeacoffee.com/powershellisfun

Public PowerShell script gallery for ScriptRunner.

Collection of knowledge about information security

Building an Active Directory domain and hacking it

ScriptSentry finds misconfigured and dangerous logon scripts.

This repo is about Active Directory Advanced Threat Hunting

Testimo is a PowerShell module for running health checks for Active Directory against a bunch of different tests

A tool to help query AD via the LDAP protocol

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

Large 📚 base of PowerShell notes in Russian language

A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support OSCP, Active Directory, CRTE, eJPT and eCPPT.

Provision a brand-new company with proper defaults in Windows, Offic365, and Azure

A repository of tools for pentesting of restricted and isolated environments.

Active Directory password filter featuring breached password checking and custom complexity rules

A Kerberos implementation built entirely in managed code.

Collection of PowerShell functions a Red Teamer may use in an engagement

PowerShell Active Directory helper functions to manage healthy Active Directory

Timeline of Active Directory changes with replication metadata

Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.

Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

A swiss army knife for pentesting networks