Six Degrees of Domain Admin

Empire is a PowerShell and Python post-exploitation agent.

Automation for internal Windows Penetrationtest / AD-Security

Privilege Escalation Enumeration Script for Windows

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

PowerShell Pass The Hash Utils

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket