A curated list of awesome Active Directory Penetration Testing and attack resources
-
Updated
May 11, 2022
A curated list of awesome Active Directory Penetration Testing and attack resources
An Active Directory purple-team lab that fights back — and records everything. Four VMs via Vagrant and Ansible: Windows Server 2022 domain, Vector telemetry, Graylog detection. Run the attack, read the logs, write the rule, watch it fire, then evade it.
Active Directory security assessment lab — deployed BadBlood on Azure, attacked with Kerberoasting and AS-REP Roasting from Kali, remediated all findings, and documented before/after PingCastle scoring. Full MITRE ATT&CK mapping.
A variant of davidprowe/BadBlood that fills an Active Directory lab with realistic objects using rockyou-derived weak passwords (for AD attack practice in a lab).
To associate your repository with the badblood topic, visit your repo's landing page and select "manage topics."