Active-Directory-Exploitation-Cheat-Sheet

AD exploit toolkit

A collection of PowerShell scripts and methods for exploiting Windows Active Directory vulnerabilities

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

GitHub

2k stars
77 watching
500 forks
Language: PowerShell
last commit: almost 4 years ago
Linked from 1 awesome list

active-directoryactive-directory-cheatsheetactive-directory-exploitationcheat-sheetcheatsheetenumerationexploitationhackinghacking-cheasheethacking-toolhacking-toolsinfosecpenetration-testingpentestingpowershellprivilege-escalationsecuritywindowswindows-active-directory

Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
s1ckb0y1337/active-directory-exploitation-cheat-sheetA comprehensive resource for exploiting and enumerating vulnerabilities in Windows Active Directory networks.5,745
infosecn1nja/ad-attack-defenseAn interactive guide to understanding and defending against attacks on Active Directory networks.4,436
byt3bl33d3r/deathstarAutomates gaining Domain and/or Enterprise Admin rights in Active Directory environments using offensive TTPs1,592
itm4n/privesccheckA PowerShell script that checks for local privilege escalation vulnerabilities on Windows systems.3,034
cheat/cheatAn interactive command-line cheatsheet generator and viewer12,489
fox-it/aclpwn.pyExploits vulnerabilities in Active Directory due to misconfigured ACLs using Python and BloodHound704
ly4k/certipyA tool for enumerating and abusing Active Directory Certificate Services2,474
pedrib/pocContains public advisories, exploits, and code related to vulnerabilities and hacking.826
cloud-architekt/azuread-attack-defenseA collection of attack scenarios and mitigation strategies for Microsoft Entra ID2,183
deanofcyber/active-directory-penetration-testing-and-securityA collection of resources and documentation for testing and securing Active Directory environments30
oncybersec/oscp-enumeration-cheat-sheetA cheat sheet for conducting enumeration during penetration testing and security assessments102
owasp/cheatsheetseriesProvides concise security guidance for web application developers28,396
orange-cyberdefense/goadA pentest active directory LAB project providing a vulnerable environment for practice.5,620
fuzzdb-project/fuzzdbA comprehensive toolset for identifying and exploiting application vulnerabilities through dynamic testing8,288
curi0usjack/adimporterTools for generating realistic test user accounts in Active Directory69