✦ The Sorcerer's Arsenal ✦

Tools

Dark Arts instruments forged for Red Team operations

⚔️

⚡ Active Directory & Kerberos

Graph-based AD attack path finder. Maps privilege escalation routes through the domain.

Kerberos abuse Swiss Army knife — AS-REP Roasting, Kerberoasting, Pass-the-Ticket, S4U abuse.

Python collection of network protocols. secretsdump, psexec, wmiexec, GetNPUsers, DCSync and more.

AD Certificate Services (ADCS) attack framework. ESC1–ESC13 enumeration and exploitation.

Tools for Kerberos PKINIT abuse — UnPAC-the-hash, Shadow Credentials attacks.

PowerShell AD recon tool. Enumerate users, groups, ACLs, GPOs, trusts and more without RSAT.

🔍 Enumeration & Scanning

Network execution tool for SMB/LDAP/MSSQL/FTP. Enumerate, spray, and dump credentials at scale.

Network mapper — port scanning, service detection, OS fingerprinting, and NSE scripting engine.

Fast Kerberos-based user enumeration and password spraying — without triggering traditional lockouts.

AD attack path visualizer — alternative to BloodHound with real-time analysis and browser UI.

💥 Exploitation

The world's most used penetration testing framework — exploit modules, payloads, auxiliary, post.

ExploitFramework

metasploit.com →

SMB/LDAP/MSSQL post-exploitation and lateral movement — predecessor to NetExec.

Extract plaintexts passwords, hashes, PINs, Kerberos tickets from Windows memory. Classic must-have.

🏰 C2 & Post-Exploitation

Commercial adversary simulation platform. Beacons, malleable C2 profiles, and team server for red ops.

cobaltstrike.com →

Post-exploitation framework with PowerShell, Python, and C# agents. Full C2 with stager generation.

Modern C2 framework with Demon agent — evasion-focused with sleep obfuscation and OPSEC features.

🪄 Custom Spells (My Tools)

Interactive Bash wrapper for NetExec — streamlined credential gathering, enumeration, and hash operations in one tool.

CustomNetExecAD

github.com/sabastiaz →

View Mastered Spells →