game of active directory

Automation for internal Windows Penetrationtest / AD-Security

Privilege Escalation Enumeration Script for Windows

A post-exploitation powershell tool for extracting juicy info from memory.

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be r…

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

Microsoft signed ActiveDirectory PowerShell module

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

Azure JWT Token Manipulation Toolset

Cover various security approaches to attack techniques and also provides new discoveries about security breaches.

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

Fuegoshell is a powershell oneliner generator for Windows remote shell re-using TCP 445

Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute

Active directory Attacks and Scripts

Empire is a PowerShell and Python post-exploitation agent.