ExchangeFinder is a simple and open-source tool that tries to find Micrsoft Exchange instance for a given domain based on…
Masky is a python library providing an alternative way to remotely dump domain users' credentials thanks to an ADCS. A…
SpoofThatMail is a Bash script to check if a domain or list of domains can be spoofed based in DMARC…
RemotePotato0 is an exploit that allows you to escalate your privileges from a generic User to Domain Admin. Briefly: It…
Domained is a domain name enumeration tool. The tools contained in it requires Kali Linux (preferred) or Debian 7+ and…
Richkit is a python3 package that provides tools taking a domain name as input, and returns additional information on that…
BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the…
Turbolist3r is a fork of the sublist3r subdomain discovery tool. In addition to the original OSINT capabilties of sublist3r, turbolist3r…
ADAudit is a PowerShell Script to perform a quick AD audit. If you have any decent powershell one liners that…
Rock-On is a all in one recon tool that will help your Recon process give a boost. It is mainly…