ADCSGoat: A Deliberately Vulnerable Active Directory Certificate Services Lab
☆21Oct 7, 2026Updated last week
Alternatives and similar repositories for ADCSGoat
Users that are interested in ADCSGoat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A PowerShell wrapper for certutil.exe☆22Aug 21, 2026Updated last month
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- A Windows tool that converts LDIF files to BloodHound CE☆33Dec 20, 2025Updated 9 months ago
- ☆92Aug 5, 2026Updated 2 months ago
- Performs a global AMSI bypass by patching amsi.dll in memory.☆21Oct 14, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A tiny tool to identify and remediate common misconfigurations in Active Directory Certificate Services☆26May 28, 2025Updated last year
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆36Dec 9, 2019Updated 6 years ago
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- Mishky's AD Range & The Escalation Path from Hell, Version 1.1☆13May 7, 2025Updated last year
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆88Oct 10, 2026Updated last week
- Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADC…☆211Aug 24, 2026Updated last month
- ☆37Mar 6, 2026Updated 7 months ago
- Automating Active Directory Tiering☆29Oct 7, 2025Updated last year
- An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers☆110Oct 7, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A style guide that describes how I want my PowerShell written. For use by both humans and LLMs/agents.☆16Updated this week
- ☆46Jul 1, 2026Updated 3 months ago
- PowerShell tool to deploy deceptive Active Directory objects, and audit them☆16Jan 7, 2026Updated 9 months ago
- The cActiveDirectorySecurity module contains PowerShell Functions which are designed to report on and manipulate Access Control Lists on …☆11Aug 31, 2018Updated 8 years ago
- Active Directory security assessment in Rust: directory discovery, Tier-0 path analysis, supported validation, and evidence reporting.☆109Sep 25, 2026Updated 3 weeks ago
- Exports AD OUs and GPOs to a Visio Map☆40Dec 4, 2025Updated 10 months ago
- ExchangeHound is a defensive BloodHound OpenGraph collector for on-prem Microsoft Exchange that maps mailbox delegation and Exchange priv…☆77Apr 17, 2026Updated 6 months ago
- Extract DPAPI CREDHIST and Masterkey hashes☆23May 28, 2026Updated 4 months ago
- Render a simulated Active Directory Users and Computers tree from a Markdown unordered list in HTML☆40Dec 28, 2025Updated 9 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Microsoft Active Directory (AD) Awesome List☆34Sep 7, 2026Updated last month
- Test bench lab for Shellcode Obfuscation☆38Sep 2, 2025Updated last year
- Kerberos CNAME abuse PoC☆110Jan 27, 2026Updated 8 months ago
- A Pentesters Confluence Keyword Scanner☆21Dec 3, 2024Updated last year
- AADInternals-Endpoints PowerShell module☆40Jul 2, 2025Updated last year
- ☆14Aug 3, 2026Updated 2 months ago
- another PrivEsc potato...☆120Sep 5, 2026Updated last month
- a minimalistic winrm client written in python☆50Apr 17, 2026Updated 6 months ago
- Serving payloads only to allowed processes using Windows projected file system feature☆25Feb 7, 2026Updated 8 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆26Feb 18, 2025Updated last year
- A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack grap…☆84Sep 15, 2026Updated last month
- AD CS exploitation related stuff goes here☆40Mar 23, 2026Updated 6 months ago
- Hosts the repository of the AD CS Performance Toolkit☆22Jun 15, 2026Updated 4 months ago
- Shellph is a portable command-line utility designed to automate encryption and obfuscation of arbitrary shellcode. Named after my cat (Be…☆36Jul 20, 2026Updated 2 months ago
- Impersonate Windows tokens in Nim☆24Aug 4, 2025Updated last year
- Deployment of an Active Directory Tier Model structure to support Tier 0, Tier 1, and Tier 2 objects.☆412Updated this week