pingcastle
GOAD
| pingcastle | GOAD | |
|---|---|---|
| 16 | 20 | |
| 2,129 | 4,382 | |
| - | 5.8% | |
| 5.6 | 9.1 | |
| 2 months ago | 7 days ago | |
| C# | PowerShell | |
| GNU General Public License v3.0 or later | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pingcastle
-
Open source vulnerability scanner
I use OpenVas (on Kali) and PingCastle (on Windows).
-
PingCastle and Active Directory hardening
Hi! I just ran PingCastle and I got two major issues:
-
Server 2016 - Enterprise Key Admins GPO linking delegation at the domain level & the domain controller OU level
You can also run these types of assessments yourself using tools such as - https://www.purple-knight.com/ - and - https://www.pingcastle.com - both will provide very detailed reports and steps for remediation.
- Specific user account breaks any computers domain connection is logs into... Stumped!
-
AD security post ransomware :(
https://www.pingcastle.com/ (free open source tool)
-
Active Directory Security Tools
PingCastle - the OG AD hygiene scanner - https://www.pingcastle.com/
-
Resetting Password permissions
Create a security group and delegate permissions to that. I suggest you get a copy of Ping Castle and do an AD scan and figure out what else is misconfigured. https://www.pingcastle.com/
-
Azure AD auditing tools
Try PingCastle ! The easiest and gives you lot of info + remmediation
- Domain Admin Security Training
- Best solutions to check rights, access and general security
GOAD
- Failed the OSCP 😞
-
Ethical Hacking / Pentest Lab
Here is one project that is built out to build a domain environment: https://github.com/Orange-Cyberdefense/GOAD
-
Interview preparation guide for AD pentesting?
Have a look at https://github.com/Orange-Cyberdefense/GOAD. You can learn a lot of AD pentesting techniques there. Should be enough for entering any AD related role.
- Can anyone describe their red team infrastructure?
-
OSCP AD labs
OSCP AD environment is not a hard one but just to make yourself comfortable, I would recommend you to try this awesome lab with almost every scenario and tool: Game of Active Directory: https://github.com/Orange-Cyberdefense/GOAD
-
Help setting up an AD test lab in proxmox for thesis
I have already considered using an automated script like https://github.com/Orange-Cyberdefense/GOAD but I do not see support for Proxmox.
- Uvod v enumeracijo AD okolja
- Git for TF scripts to build lab env?
-
AD test environment
https://github.com/Orange-Cyberdefense/GOAD is a great for learning AD
-
Active Directory Security Tools
GameOfAD - vulnerable AD environment - https://github.com/Orange-Cyberdefense/GOAD
What are some alternatives?
BloodHound - Six Degrees of Domain Admin
vulnerable-AD - Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
access-manager - Access Manager provides web-based access to local admin (LAPS) passwords, BitLocker recovery keys, and just-in-time administrative access to Windows computers in a modern, secure, and user-friendly way.
DetectionLab - Automate the creation of a lab environment complete with security tooling and logging best practices
Kerberos.NET - A Kerberos implementation built entirely in managed code.
BadBlood - BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.
Adalanche - Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)
Splunk-In-The-Cloud-Setup - How-to on setting up splunk in Azure
11Bchecker
red_team_attack_lab - Red Team Attack Lab for TTP testing & research
AutomatedLab - AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.
Responder - Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.