Leo4j

Active Directory Auditing and Enumeration

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

Retrieve and display information about active user sessions on remote computers. No admin privileges required.

Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement

Execute commands in other Sessions

Tool to bypass LSA Protection (aka Protected Process Light)

A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)