Lars Karlslund

Adalanche. Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

ldapnomnom. Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

nifo. Nuke It From Orbit - remove AV/EDR with physical access

hashmuncher. Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later

deploy-goad. Script to install prerequisites for deploying GOAD on Ubuntu Linux 22.04

fastsync. Fast syncronization across networks using speedy compression, lots of parallelization and fast hashmaps for keeping track of things internally

adalanche-sampledata. Explore the GOAD Active Directory lab in 5 minutes with Adalanche

topdomains. Top 17 million most popular domains as CSV (from Google CRUX dataset)

azureimposter. Go module that allows you to authenticate to Azure with a well known client ID using interactive logon and grab the token

stringdedup. String deduplication package for Go

turbograb. Grab the content of lots of websites in parallel

zfs-inplace-recompress. Inplace recompression for ZFS files

SecretScanner. Find secrets and passwords in container images and file systems

jugular. Ultrafast CUPS-browsed scanner (CVE-2024-47176)

egginc-automation. A bot to automate Egg Inc running under emulation in Windows

hpgl-tools. HPGL / PLT optimizer and serial sender for Windows, Linux and OSX

go-trigger. A Global event triggerer for golang. Defines functions as event with id string. Trigger the event anywhere from your project.

inhaler. Hashes plaintext passwords

GOAD. game of active directory

lorca. Build cross-platform modern desktop apps in Go + HTML5

go-win64api. Windows API wrappers for Go - useful for SysOps

go-ntlmssp. NTLM/Negotiate authentication over HTTP

ldap. Basic LDAP v3 functionality for the GO programming language.

dnsportfwd. Dynamic port forwards based on DNS lookups - it's awesomesauce!

eyetracker. Webcam based eye tracking software

Locksmith. A small tool built to detect and fix common misconfigurations in Active Directory Certificate Services.

memscanner.

stringsplus. Golang package for string functions not found in the stock package

go-ole. win32 ole implementation for golang

url-handlers. List all registered URL handlers on your Windows machine

remote-monitoring-permissions. Grants or revokes remote monitoring permissions (for SolarWinds Orion or similar)

benchstatn. Go Benchstat that can compare multiple benchmarks

go-mastodon. mastodon client for golang

time-timespan. Golang utility library providing a broad-scaled extension to time.Duration.

thinstation-ng. A framework for making thin and light Linux based images for thin clients, kiosks and servers. The Next Generation

binstruct. Golang binary decoder for mapping data into the structure

gonk. Go

sys. [mirror] Go packages for low-level interaction with the operating system

whenup. Allows you to start processes when a host is up, or just monitor its status using ICMP

deploy-adlab. Uses AutomatedLab on HyperV to deploy a vulnerable AD with surrounding infrastructure components