activedirectorysecurity

Active Directory Auditing and Enumeration

This repository contains my preparation notes for CRTP and Red Teaming, focused on Active Directory attacks and defenses.

Certified Red Team Professional (CRTP) - Notes

This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...)

Addon for BHCE

msuserstats is a comprehensive Powershell tool to manage accounts from Microsoft Entra ID and Active Directory. It supports: a unified view on users across Entra ID and AD; allows to find the latest sign-in from both worlds and mark inactive users; reports on MFA methods and can support enforcement of MFA.

CTF and Bug Bounty Hunting WriteUps.

PowerHouse is a C++ DLL that provides direct PowerShell execution without launching powershell.exe. It features interactive console mode with ASCII banner and base64-encoded script execution from .dat files. Using COM interop through WScript.Shell, it captures both output and error streams while gracefully handling no-console scenarios.

Sigma-format SAST detection rules for Active Directory attack techniques — CLAUDE 94 rules across 14 categories, mapped to MITRE ATT&CK v14 | For blue teams, SOC analysts and purple team exercises

Generates LDAP Queries similar to Pentest.ws MSFVenom Command Builder

Microsoft Ecosysteem related (Powershell, AD, GraphAPi, Entra, intune and so on