Integration-IT/Active-Directory-Exploitation-Cheat-Sheet

PowerShell
Windows

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directoryactive-directory-cheatsheetactive-directory-exploitationpenetration-testinghackinghacking-cheasheetwindows-active-directorycheatsheetpowershellhacking-toolsexploitationprivilege-escalation
Crecimiento de estrellas
Estrellas
2.8k
Forks
518
Crecimiento semanal
+2
Issues
1
1k2k
may 2020jun 2022jul 2024ago 2026
README

Active Directory Cheat Sheet

This repository contains a general methodology in the Active Directory environment. It is offered with a selection of quick commands from the most efficient tools based on Powershell, C, .Net 3.5 and .Net 4.5.


General Process:

  • Recon
  • Domain Enum
  • Local Privilege Escalation
  • Local Account Stealing
  • Monitor Potential Incoming Account
  • Local Account Stealing
  • Admin Recon
  • Lateral Movement
  • Remote Administration
  • Domain Admin Privileges
  • Cross Trust Attacks
  • Persistance and Exfiltrate

Active Directory Kill Chain:

Process

Cheat Sheet Tree:


Contribution, Proposal, Issue:

Repositorios relacionados
byt3bl33d3r/CrackMapExec

A swiss army knife for pentesting networks

PythonPyPIcliBSD 2-Clause "Simplified" Licensepythonactive-directory
9.2k1.7k
Orange-Cyberdefense/GOAD

game of active directory

PowerShellGNU General Public License v3.0active-directoryinfrastructure-as-code
8.3k1.1k
S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

tutorialMIT Licenseactivedirectoryactive-directory
6.7k1.3k
Pennyw0rth/NetExec

The Network Execution Tool

PythonPyPIcliBSD 2-Clause "Simplified" Licensehackingpentest
netexec.wiki
5.8k756
JPCERTCC/LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

PythonPyPIOthersecuritydfir
3.2k488
netwrix/pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

C#Otheractive-directoryping-castle
pingcastle.com
2.9k351
lazywinadmin/PowerShell

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

PowerShelllibraryMIT Licensepowershellscripting
lazywinadmin.com
2.9k743
safebuffer/vulnerable-AD

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

PowerShellMIT Licenseactive-directorypowershell
2.3k446
AutomatedLab/AutomatedLab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

PowerShellMIT Licensepowershelldeployment
2.2k384
lefayjey/linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

ShellMIT Licensepenetration-testingpentesting
2.2k305
lkarlslund/Adalanche

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

GoGo ModulesGNU Affero General Public License v3.0blueteamactive-directory
netsection.com
2.2k200
m14r41/PentestingEverything

Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...

TypeScriptnpmtutorialMIT Licenseappsecapi-pentesting
pentesting.m14r41.in
2.1k463