4 AD Attacks and How to Protect Against Them

• BloodHound

  28 9,386 7.6 PowerShell

  Six Degrees of Domain Admin

  

BloodHound is a web application that identifies and visualizes attack paths in Active Directory environments. It identifies the fastest series of steps from any AD account or machine to a desired target, such as membership in the Domain Admins group. Regularly checking your AD using BloodHound can be an effective defense mechanism that helps you ensure that compromising an account or machine doesn’t enable an attacker to compromise your domain.

• mimikatz

  25 18,730 5.2 C

  A little tool to play with Windows security

Mimikatz

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• PowerSploit

  18 8,062 0.5 PowerShell

  Discontinued PowerSploit - A PowerShell Post-Exploitation Framework

  

PowerSploit

• DeathStar

  2 1,564 2.6 Python

  Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

Death Star

Suggest a related project