├── CARTP ├── AD_Azure_CTF_Flags.ps1 ├── AuthenticatedEnumeration_AzCLI.ps1 ├── AuthenticatedEnumeration_AzureADModule.ps1 ├── Azure_Attacks.ps1 └── DiscoveryAndRecon.ps1 ├── Notes ├── ACL_Abuse.ps1 ├── CommandsFromCourse.ps1 ├── Get-AVStatus.ps1 ├── Get-WmiNamespace.ps1 ├── Heidi_Commands.ps1 ├── PowerUpSQL_Commands.ps1 ├── PrivEsc.ps1 ├── Recon.ps1 ├── Saved_Commands.ps1 ├── Ticket_Commands.ps1 └── WMI_Commands.ps1 └── README.md /CARTP/AD_Azure_CTF_Flags.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/CARTP/AD_Azure_CTF_Flags.ps1 -------------------------------------------------------------------------------- /CARTP/AuthenticatedEnumeration_AzCLI.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/CARTP/AuthenticatedEnumeration_AzCLI.ps1 -------------------------------------------------------------------------------- /CARTP/AuthenticatedEnumeration_AzureADModule.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/CARTP/AuthenticatedEnumeration_AzureADModule.ps1 -------------------------------------------------------------------------------- /CARTP/Azure_Attacks.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/CARTP/Azure_Attacks.ps1 -------------------------------------------------------------------------------- /CARTP/DiscoveryAndRecon.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/CARTP/DiscoveryAndRecon.ps1 -------------------------------------------------------------------------------- /Notes/ACL_Abuse.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/ACL_Abuse.ps1 -------------------------------------------------------------------------------- /Notes/CommandsFromCourse.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/CommandsFromCourse.ps1 -------------------------------------------------------------------------------- /Notes/Get-AVStatus.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/Get-AVStatus.ps1 -------------------------------------------------------------------------------- /Notes/Get-WmiNamespace.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/Get-WmiNamespace.ps1 -------------------------------------------------------------------------------- /Notes/Heidi_Commands.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/Heidi_Commands.ps1 -------------------------------------------------------------------------------- /Notes/PowerUpSQL_Commands.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/PowerUpSQL_Commands.ps1 -------------------------------------------------------------------------------- /Notes/PrivEsc.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/PrivEsc.ps1 -------------------------------------------------------------------------------- /Notes/Recon.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/Recon.ps1 -------------------------------------------------------------------------------- /Notes/Saved_Commands.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/Saved_Commands.ps1 -------------------------------------------------------------------------------- /Notes/Ticket_Commands.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/Ticket_Commands.ps1 -------------------------------------------------------------------------------- /Notes/WMI_Commands.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/Notes/WMI_Commands.ps1 -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/kurtjarvis/PowershellActiveDirectoryAbuse/HEAD/README.md --------------------------------------------------------------------------------