GOAD (v3)

🔖 Documentation : https://orange-cyberdefense.github.io/GOAD/

Description

GOAD is a pentest active directory LAB project. The purpose of this lab is to give pentesters a vulnerable Active directory environment ready to use to practice usual attack techniques.

Caution

This lab is extremely vulnerable, do not reuse recipe to build your environment and do not deploy this environment on internet without isolation (this is a recommendation, use it as your own risk).
This repository was build for pentest practice.

Licenses

This lab use free Windows VM only (180 days). After that delay enter a license on each server or rebuild all the lab (may be it's time for an update ;))

OCI Management Agent (Post-Provision)

This repository includes an external workflow to install OCI Management Agent on both Windows and Linux VMs without changing the default deployment flow.

1. Prepare variables (PAR URLs for agent packages and install key) and run:

./scripts/install_oci_management_agents.sh --instance <instance_id> \
  --windows-zip-url "<windows_zip_url>" \
  --linux-zip-url "<linux_package_url_zip_or_rpm>" \
  --install-key-id "<ocid1.managementagentinstallkey...>"

2. You can also generate/update only the override vars file and run later:

./scripts/install_oci_management_agents.sh --prepare-only

The wrapper writes overrides to workspace/oci_management_agent_vars.yml and then calls:

python3 goad.py -t install -r oci_management_agent.yml [-i <instance_id>]

For already-provisioned projects where you want direct inventory mode:

./scripts/install_oci_management_agents.sh \
  --inventory ad/GOAD/providers/oci/inventory \
  --global-inventory globalsettings.ini \
  --windows-zip-url "<windows_zip_url>" \
  --linux-zip-url "<linux_package_url_zip_or_rpm>" \
  --install-key-id "<ocid1.managementagentinstallkey...>"

Deploy GOAD on OCI (One-Click)

Deploy the full GOADv3 lab directly from the OCI Console using Resource Manager — no CLI, no local tooling required. All 5 Windows AD hosts, Linux monitoring instances, and the Ansible jumpbox are provisioned automatically.

What happens when you click:

1. OCI Console opens the "Create Stack" wizard with the GOADv3 source pre-loaded
2. Fill in the form (compartment, SSH key, Windows password, optional extensions)
3. Click Apply — the jumpbox auto-provisions the entire AD lab via Ansible
4. SSH to the jumpbox and tail -f /var/log/goad-provision.log to watch progress

Note

The stack creates ~8 compute instances (5 Windows + 2 Linux + 1 jumpbox). Ensure your tenancy has sufficient service limits for the chosen shapes. Default config uses VM.Standard.E5.Flex with 2 OCPUs/32GB per Windows host and 1 OCPU/12GB per Linux host.

Available labs

• GOAD Lab family and extensions overview

• GOAD : 5 vms, 2 forests, 3 domains (full goad lab)

• GOAD-Light : 3 vms, 1 forest, 2 domains (smaller goad lab for those with a smaller pc)

• MINILAB: 2 vms, 1 forest, 1 domain (basic lab with one DC (windows server 2019) and one Workstation (windows 10))

• SCCM : 4 vms, 1 forest, 1 domain, with microsoft configuration manager installed

• NHA : A challenge with 5 vms and 2 domains. no schema provided, you will have to find out how break it.