attacking-active-directory

What problem does it solve?

Automates comprehensive Active Directory security assessments by orchestrating Kerberos-based attacks, credential dumping, and lateral movement to identify misconfigurations and privilege paths.

Core Features & Use Cases

• Kerberos attacks: Kerberoasting and ASREPRoasting to enumerate weak service accounts and credentials.
• Credential dumping and path pivoting: DCSync and Mimikatz-based credential extraction, with lateral movement techniques such as PtH and PtT.
• BloodHound analysis: collect and map relationships to identify shortest attack paths to domain principals.
• Use cases: red-team assessments, AD hardening validation, and privilege-escalation path discovery within Windows domains.

Quick Start

Run an AD security assessment against a Windows domain to enumerate Kerberoastable accounts, dump credentials, and map attack paths.