Useful Security tools

Tools

• PingCastle - an Active Directory audit tool (and free!) with pretty good metrics.
• Responder - A LLMNR, NBT-NS and MDNS poisoner
• BloodHound - Six Degrees of Domain Admin
• AD Control Path - Active Directory Control Paths auditing and graphing tools
• PowerSploit - A PowerShell Post-Exploitation Framework
• PowerView - Situational Awareness PowerShell framework
• Empire - PowerShell and Python post-exploitation agent
• Mimikatz - Utility to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory but also perform pass-the-hash, pass-the-ticket or build Golden tickets
• Tools Cheatsheets - (Beacon, PowerView, PowerUp, Empire, ...)
• UACME - Defeating Windows User Account Control
• Windows System Internals - (Including Sysmon etc.)
• Hardentools - Collection of simple utilities designed to disable a number of "features" exposed by Windows
• CrackMapExec - A swiss army knife for pentesting Windows/Active Directory environments
• SharpSploit
• Rubeus - Rubeus is a C# toolset for raw Kerberos interaction and abuses
• Koadic - Koadic, or COM Command & Control, is a Windows post-exploitation rootkit
• SILENTTRINITY - A post-exploitation agent powered by Python, IronPython, C#/.NET