kernelstub / Pwnbox
Privacy focused NixOS pentesting environment with a customizable desktop and security tools.
kernelstub / Pwnbox
Orange-Cyberdefense / GOAD
game of active directory
Pennyw0rth / NetExec
The Network Execution Tool
netwrix / pingcastle
PingCastle - Get Active Directory Security at 80% in 20% of the time
lazywinadmin / PowerShell
PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)
dirkjanm / ROADtools
A collection of Azure AD/Entra tools for offensive and defensive security purposes
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
lkarlslund / Adalanche
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
m14r41 / PentestingEverything
Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
dromara / MaxKey
Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。
MichaelGrafnetter / DSInternals
Directory Services Internals (DSInternals) PowerShell Module and Framework
jm33-m0 / emp3r0r
Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.
jakehildreth / Locksmith
A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
AzureAD / microsoft-authentication-library-for-dotnet
Microsoft Authentication Library (MSAL) for .NET
pnp / cli-microsoft365
Manage Microsoft 365 and SharePoint Framework projects on any platform
Azure-Samples / active-directory-aspnetcore-webapp-openidconnect-v2
An ASP.NET Core Web App which lets sign-in users (including in your org, many orgs, orgs + personal accounts, sovereign clouds) and call Web APIs (including Microsoft Graph)
freeipa / freeipa
Mirror of FreeIPA, an integrated security information management solution
ASCIT31 / Dark-Moon
Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.
Badgerati / Pode
Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers
OpenIdentityPlatform / OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
ADScanPro / adscan
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
vmware / pinniped
Pinniped is the easy, secure way to log in to your Kubernetes clusters.
HarmVeenstra / Powershellisfun
Repository with the scripts that I have used in my blogs on https://powershellisfun.com. If you like these, please sponsor this project using the Sponsor button below or buy me a coffee :) https://www.buymeacoffee.com/powershellisfun
LETHAL-FORENSICS / Microsoft-Analyzer-Suite
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
Lifailon / rudocs
📚 Large base of notes on PowerShell, Linux and DevOps tools in ru language (cheat sheets and documentation).
EvotecIT / Testimo
Testimo is a PowerShell module for running health checks for Active Directory against a bunch of different tests
Mafifrizi / ARES
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
g0h4n / RustHound-CE
Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀
lithnet / ad-password-protection
Active Directory password filter featuring breached password checking and custom complexity rules
EvotecIT / ADEssentials
PowerShell Active Directory helper functions to manage healthy Active Directory
Leo4j / Invoke-ADEnum
Active Directory Auditing and Enumeration
shinthink / blitzstrike
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
ADScanPro / Claude-AD
Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), with per-technique OPSEC/telemetry notes. Drives netexec, impacket, certipy, bloodyAD, BloodHound CE.
ZeroDayEvil / CVE-2026-54121-Certighost
🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.
armourinfosec / Enterprise-Windows-Infrastructure-Security
An Obsidian-based knowledge base for Windows Server administration and defensive hardening.
portbuster1337 / Atlas
Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#
g0h4n / PassTheCert-rs
Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀
warpedatom / NoiseHound
Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/Elastic/MDI/WDAC) plus Azure.
SyntaxMethod / CVE-2026-41089-Netlogon-RCE-PoC
CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.
issuerd / issuerd
Fast, Keycloak-compatible IAM with DPoP and CIBA
joshuagodwin7929 / Purple-Team-Automation
Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.
M-med / Active-Directory-Simulation-Attack-
A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.
SagarBiswas-MultiHAT / The-BlackHAT-roadmap
The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources
Stratus-Security / Sift
Fast, cross-platform CLI for finding secrets and sensitive data across filesystems, SMB, Active Directory, Microsoft 365, Slack, Jira and Confluence.
VibhuviOiO / ldap-manager
Modern web-based management UI for OpenLDAP — multi-cluster, secure password caching, server-side pagination. Docker image: docker.io/vibhuvioio/ldap-manager