Category: Information Gathering

ntlmscan

ntlmscan: scan for NTLM directories

ntlmscan scan for NTLM directories reliable targets are: OWA servers Skype for Business/Lync servers Autodiscover servers (autodiscover.domain.com and lyncdiscover.domain.com) once identified, use nmap and the http-ntlm-info script to extract internal domain/server information...

automate Active Directory enumeration

Start-ADEnum: automate Active Directory enumeration

Start-ADEnum A tool to automate Active Directory enumeration. Tool Prereq This tool requires that you have a runas /netonly shell. Download git clone https://github.com/lkys37en/Start-ADEnum.git Functions Start-PreReqCheck Install-Tools Start-ADEnum Start-PreReqCheck This...