AdtimelineTimeline of Active Directory changes with replication metadata
TestimoTestimo is PowerShell module for running health checks for Active Directory (and later on any other server type) against a bunch of different tests
ZbangzBang is a risk assessment tool that detects potential privileged account threats
Ad Ldap EnumAn LDAP based Active Directory user and group enumeration tool
Ad Password ProtectionActive Directory password filter featuring breached password checking and custom complexity rules
Powershell ScriptsPowerShell scripts ranging from SCCM, MSO, AD, and other corporate enterprise uses... to sending cat facts to coworkers.
Adaz🔧 Automatically deploy customizable Active Directory labs in Azure
LdapcherryWeb UI for managing users and groups in multiple directory services.
Monitor AdgroupmembershipPowerShell script to monitor Active Directory groups and send an email when someone is changing the membership
LdaptoolsLdapTools is a feature-rich LDAP library for PHP 5.6+.
MacoslapsSwift binary that will change a local administrator password to a random generated password. Similar behavior to LAPS for Windows
CypherothAutomated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.
MultiotpmultiOTP open source strong two factor authentication PHP library, OATH certified, with TOTP, HOTP, Mobile-OTP, YubiKey, SMS, QRcode provisioning, etc.
AdsipsPowerShell module to interact with Active Directory using ADSI and the System.DirectoryServices namespace (.NET Framework)
AdessentialsPowerShell Active Directory helper functions to manage healthy Active Directory
Password pwncheckKerberos / Windows AD / Linux PAM password change check against breached lists (HIBP), and other rules
Ldap Passwd WebuiVery simple web interface for changing password stored in LDAP or Active Directory (Samba 4 AD).
LogontracerInvestigate malicious Windows logon by visualizing and analyzing Windows event log
AdsearchA tool to help query AD via the LDAP protocol
Bonobo Git ServerBonobo Git Server for Windows is a web application you can install on your IIS and easily manage and connect to your git repositories. Go to homepage for release and more info.
ActionpacksPublic PowerShell script gallery for ScriptRunner.
Adfs2Multi Vagrant environment with Active Directory
PsadhealthA toolkit of AD specific health checks that you can run in your environment to ensure your Active Directory is running optimally.
PowershellPowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)
Mssqli DuetSQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing
DeathstarUses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.
AutomatedlabAutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2019, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.
RedsnarfRedSnarf is a pen-testing / red-teaming tool for Windows environments
Dnn.azureadproviderThe DNN Azure Active Directory Provider is an Authentication provider for DNN Platform (formerly DotNetNuke) that uses Azure Active Directory OAuth2 authentication to authenticate users.
Eloquent LdapA Laravel 5.1 package that first tries to log the user against the internal database if that fails, it tries against the configured LDAP/AD server.
WatchadAD Security Intrusion Detection System
Dsinternals Directory Services Internals (DSInternals) PowerShell Module and Framework
PingcastlePingCastle - Get Active Directory Security at 80% in 20% of the time
GofetchGoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
AclightA script for advanced discovery of Privileged Accounts - includes Shadow Admins
OrgkitProvision a brand-new company with proper defaults in Windows, Offic365, and Azure
DarthsidiousBuilding an Active Directory domain and hacking it
PlumhoundBloodhound for Blue and Purple Teams
A Red Teamer DiariesRedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Vulnerable AdCreate a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
Hunter(l)user hunter using WinAPI calls only
PodePode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers
PywerviewA (partial) Python rewriting of PowerSploit's PowerView
Kerberos.netA Kerberos implementation built entirely in managed code.
itops基于Python + Django的AD\Exchange管理系统
Server-Help💻 This VSTO Add-In allows the user to ping a list of servers and creates a file for Microsoft Remote Desktop Manager an Excel table. This is used for quickly determining which servers are offline in a list. It is written in 3 different versions as a VSTO Add-In in C# and VB.NET as well as a VBA Add-In.
gpp-decryptTool to parse the Group Policy Preferences XML file which extracts the username and decrypts the cpassword attribute.