ad-security

PowerShell scripts that audit Active Directory and produce interactive, offline HTML reports: topology, DCs, accounts, GPOs, DNS, trusts, groups/OUs and DC hardening. Read-only.

PowerShell toolkit for assessing DES/RC4 Kerberos encryption in Active Directory. Detects weak encryption across domain controllers, trusts, and event logs. Built for the January 2026 update and July 2026 RC4 removal deadlines.

AD April ’26 Check0r is a read-only PowerShell tool to assess on-prem AD for the April 2026 Kerberos RC4→AES change. It inventories SPN accounts, flags risky msDS-SupportedEncryptionTypes/KDC overrides, and collects DC System readiness events (201–209) to predict breakage and guide fixes.

Security audit tool for Active Directory. Automates a lot of checks from a pentester perspective.

State-aware AD attack orchestration in Go — initial access through cloud pillage. Wraps nxc, impacket, certipy, BloodHound, TeamsPhisher, GraphRunner, AADInternals, TokenTactics.

Modern, kapsamlı Active Directory güvenlik analizi ve raporlama aracı. PowerShell AD kontrollerini Python'a dönüştürür ve güzel HTML raporları oluşturur.

Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.

Fixes broken/inadapted Owner attributes on Active Directory objects (users, computers, groups, OUs). Companion tool to Scan-AD-broken-object-owner — no admin rights or RSAT required.

https://securitree.xyz - deep dive into cybersec with well-structured notes.

PowerShell script for cybersecurity professionals to identify Active Directory accounts with Password Never Expires flag, analyze password age and logon patterns, and export comprehensive security audit reports to CSV.

Active Directory assessment collector

AD-Descript0r is a Python tool for Active Directory reconnaissance. It authenticates against a Domain Controller, retrieves all usernames and their descriptions, and displays the results in a clean table with colored output

PowerShell module for Active Directory auditing — structured discovery, graded findings, HTML reports

🪟 Obsidian knowledge base — Windows Server administration, Active Directory security & defensive hardening

Windows service that monitors Active Directory in real time and alerts on 8 live attack techniques — Kerberoasting, Pass-the-Hash, DCSync, Golden Ticket, LDAP Recon, AS-REP Roasting, Skeleton Key, and Audit Log tampering. Built in Python using Windows Security Event Log analysis.

This script will scan your AD and Export a CSV list of Pcs that have not had activity, prior to your set number of days tolerance you input.

AttackPathCanvas — Visualize Identity Attack Paths in Active Directory

DelegationCanvas — Map Every Permission in Your Active Directory

GitHub profile README for Benjamin Iheukumere