Repository Index

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

• active-directory
• active-directory-cheatsheet
• active-directory-exploitation
• penetration-testing

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

• azureactivedirectory
• itdr
• microsoftentraid
• microsoftsentinel

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

• active-directory
• powershell
• redteaming
• penetration-testing

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

• bypass-antivirus
• antivirus-evasion
• antivirus
• attack