Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

Windows protocol library, including SMB and RPC implementations, among others.

The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin

Remote execution, like PsExec

Run the program with the specified permission level (C++20 required)

Simple utilities to manipulate Windows account security settings

Windows remote execution multitool

Splice enables Microsoft Active Directory domain joins from any network.

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to…

C# Data Collector for BloodHound

Common library used by SharpHound.

Six Degrees of Domain Admin

A collection of Trimarc-created papers in a variety of formats.

Let's the BloodHound back in.

StandIn is a small .NET35/45 AD post-exploitation toolkit