leo4j Goto Github PK

amnesiac

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

ask4creds

Prompt User for credentials

checksmbsigning

Checks for SMB signing disabled on all hosts in the network

checkwebdavstatus

Checks for WebDAV Service Status Enabled on all hosts in the network

collect-adobjects

Collect Active Directory Objects

credsmanager

A tool designed for efficient organisation and secure storage of credentials gathered during penetration tests

file-server

A simple TCP file server

find-localadminaccess

Check the Domain for Local Admin Access

get-dnsrecords

Queries DNS records from the Active Directory domain, specifically from the DNS zones stored in the Active Directory.

invoke-adenum

Automate Active Directory Enumeration

invoke-grabthehash

Get the NTLM Hash for the User or Machine Account TGT held in your current session

invoke-runassystem

A simple script to elevate current session to SYSTEM (needs to be run as Administrator)

invoke-s4u2self

A tool that abuses s4u2self to gain access to remote hosts

invoke-sessionhunter

Retrieve and display information about active user sessions on remote computers. No admin privileges required.

invoke-shadowhunter

Automate accounts takeover by abusing GenericWrite/GenericAll rights to add Shadow Credentials

invoke-sharehunter

Enumerate the Domain for Readable and Writable Shares

invoke-smbremoting

Interactive Shell and Command Execution over Named-Pipes (SMB)

invoke-wmiremoting

Command Execution or Pseudo-Shell over WMI

jbreach

jmove

Lateral Movement within Windows environments

jrecon

A tool to automate Active Directory Enumeration

keycredentiallink

Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute

passspray

Domain Password Spray

psmapexec

A PowerShell tool that takes strong inspiration from CrackMapExec.

set-domainobject

Modify or clear a property for a specified active directory object

tgt_monitor

Monitor for TGTs

token-impersonation

Make or Steal a Token

tools

validate-credentials

Validate Domain Credentials