Pennyw0rth/NetExec
The Network Execution Tool
A star delta has been computed for 61,707 of 62,640 tracked repositories in this period, and only those can be ranked in it.
A repository missing here has not been measured far enough back yet. That does not mean it did not move.
Star counts measured between 00:30 and 02:27 (BKK).
The Network Execution Tool
Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.
PingCastle - Get Active Directory Security at 80% in 20% of the time
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀
Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)
Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
A modern Active Directory management web application with a focus on delegation
Active Directory bridging tool suite
Linux-first multi-operator C2 built to stay quiet and keep working. Self-healing mesh with assisted discovery, in-memory execution with encrypted storage, scriptable agents, cross-platform BOFs, SOCKS5 pivoting, and a modular C agent delivered by a sleep-masking stager.
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
Pinniped is the easy, secure way to log in to your Kubernetes clusters.
Active Directory password filter featuring breached password checking and custom complexity rules
Access Manager provides web-based access to local admin (LAPS) passwords, BitLocker recovery keys, and just-in-time administrative access to Windows computers in a modern, secure, and user-friendly way.
Privacy focused NixOS pentesting environment with a customizable desktop and security tools.
Directory Services Internals (DSInternals) PowerShell Module and Framework
That's all 19 repositories in this period.