Active Directroy 관련 공격 도구

1. spraykatz
   • Credentials gathering tool automating remote procdump and parse of lsass process.
2. BloodHound
   • Six Degrees of Domain Admin.
3. CrackMapExec
   • A swiss army knife for pentesting networks.
4. pywerview
   • A (partial) Python rewriting of PowerSploit's PowerView.
5. Prenum
   • The perils of the pre-Windows 2000 compatible access group in a Windows domain.
6. adPEAS
   • Powershell tool to automate Active Directory enumeration.
7. CypherDog
   • PowerShell Cmdlets to interact with BloodHound Data via Neo4j HTTP API.
8. Invoke-ADEnum
   • Automate Active Directory Enumeration using PowerView.
9. LDAPNomNom
   • Anonymously bruteforce Active Directory usernames by abusing LDAP Ping requests.
10. lsassy
    • Python tool to remotely extract credentials on a set of hosts.
11. o365recon
    • Retrieve information via O365 and AzureAD with valid credentials.
12. LDAP Password Hunter
    • Password Hunter in active directory.
13. FindUncommonShares
    • Quickly find uncommon shares in vast Windows domains.
14. ADRecon
    • Gather information about the Active Directory and generates a report.
15. AzureADLateralMovement
    • Lateral movement graph for Azure Active Directory.
16. Snaffler
    • A tool to help at finding delicious candy needles in a bunch of horrible boring haystacks.
17. RidRelay
    • Enumerate usernames on a domain where you have no creds by using SMB relay.
18. jackdaw
    • Gather gather gather.
19. WinPwn
    • Automation for internal Windows pentest / AD-Security.
20. ADRT
    • Active Directory Report Tool.
21. SharpHose
    • Asynchronous password spraying tool for Windows environments.
22. windapsearch
    • Enumerate users, groups and computers from a Windows domain through LDAP queries.
23. Rubeus
    • Rubeus is a toolkit for Kerberos interaction and abuses.
24. linWinPwn
    • Automates a number of Active Directory enumeration and vulnerability.
25. msldap
    • LDAP library for auditing Microsoft Active Directory.
26. ADAPE Script
    • Active Directory assessment and privilege escalation script.
27. ADReaper
    • Enumerate an Active Directory environment with LDAP queries.
28. ADenum
    • Find misconfiguration through LDAP to exploit weaknesses with Kerberos.