Raúl Redondo

ESC1-unPAC. A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+SID), PKINIT authentication, and NT hash extraction via UnPAC-the-hash.

BOFs. Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.

SpicyAD. SpicyAD is a C# Active Directory penetration testing tool designed for authorized security assessments. It combines multiple AD attack techniques into a single, easy-to-use tool with both interactive and command-line interfaces.

Active-Directory-Certificate-Services-abuse.

ADTools. Jus a repo with a few tools focused on windows and Active Directory enumeration & attacks.

AD-Scripts. AD Scripts

Az-Cli-1shot. Az Enumeration Script

OSEP. OSEP tools and practice

Hackthebox. Hackthebox Writeups