ランキングに戻る

Integration-IT/Active-Directory-Exploitation-Cheat-Sheet

PowerShell

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directoryactive-directory-cheatsheetactive-directory-exploitationpenetration-testinghackinghacking-cheasheetwindows-active-directorycheatsheetpowershellhacking-toolsexploitationprivilege-escalation
スター成長
スター
2.8k
フォーク
518
週間成長
Issue
1
1k2k
2020年5月2022年5月2024年6月2026年7月
README

Active Directory Cheat Sheet

This repository contains a general methodology in the Active Directory environment. It is offered with a selection of quick commands from the most efficient tools based on Powershell, C, .Net 3.5 and .Net 4.5.


General Process:

  • Recon
  • Domain Enum
  • Local Privilege Escalation
  • Local Account Stealing
  • Monitor Potential Incoming Account
  • Local Account Stealing
  • Admin Recon
  • Lateral Movement
  • Remote Administration
  • Domain Admin Privileges
  • Cross Trust Attacks
  • Persistance and Exfiltrate

Active Directory Kill Chain:

Process

Cheat Sheet Tree:


Contribution, Proposal, Issue:

関連リポジトリ
byt3bl33d3r/CrackMapExec

A swiss army knife for pentesting networks

PythonPyPIBSD 2-Clause "Simplified" Licensepythonactive-directory
9.2k1.7k
Orange-Cyberdefense/GOAD

game of active directory

PowerShellGNU General Public License v3.0active-directoryinfrastructure-as-code
8.1k1.1k
S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

MIT Licenseactivedirectoryactive-directory
6.7k1.3k
Pennyw0rth/NetExec

The Network Execution Tool

PythonPyPIBSD 2-Clause "Simplified" Licensehackingpentest
netexec.wiki
5.7k731
JPCERTCC/LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

PythonPyPIOthersecuritydfir
3.2k488
netwrix/pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

C#Otheractive-directoryping-castle
pingcastle.com
2.9k351
lazywinadmin/PowerShell

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

PowerShellMIT Licensepowershellscripting
lazywinadmin.com
2.9k745
safebuffer/vulnerable-AD

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

PowerShellMIT Licenseactive-directorypowershell
2.3k447
AutomatedLab/AutomatedLab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

PowerShellMIT Licensepowershelldeployment
2.2k387
lefayjey/linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

ShellMIT Licensepenetration-testingpentesting
2.2k303
lkarlslund/Adalanche

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

GoGo ModulesGNU Affero General Public License v3.0blueteamactive-directory
netsection.com
2.2k204
MichaelGrafnetter/DSInternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

C#MIT Licensesecurity-auditpenetration-testing
dsinternals.com
2k277