adcs

Tool for Active Directory Certificate Services enumeration and abuse

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀

Free Active Directory pentesting tool for Linux. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports. No Windows needed.

Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀

PowerShell PKI Module

Policy Module for Microsoft Active Directory Certificate Services

Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), with per-technique OPSEC/telemetry notes. Drives netexec, impacket, certipy, bloodyAD, BloodHound CE.

A TUI for Active Directory collection.

Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.

TokenCert

Active Directory security assessment in Rust: directory discovery, Tier-0 path analysis, supported validation, and evidence reporting.

An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers

PowerShell Module to ease requesting certificates on Windows

Active Directory kerberos attack framworks.

Active Directory certificate abuse

REST API for Microsoft Active Directory Certificate Services

Orbit, Rigid Body Dynamics and Magnetic field simulation for Low-Earth-Orbit Spacecraft