PowerShell toolkit for assessing DES/RC4 Kerberos encryption in Active Directory. Detects weak encryption across domain controllers, trusts, and event logs. Built for the January 2026 update and July 2026 RC4 removal deadlines.

Windows service that monitors Active Directory in real time and alerts on 8 live attack techniques — Kerberoasting, Pass-the-Hash, DCSync, Golden Ticket, LDAP Recon, AS-REP Roasting, Skeleton Key, and Audit Log tampering. Built in Python using Windows Security Event Log analysis.

https://securitree.xyz - deep dive into cybersec with well-structured notes.

Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.

AR.PY - Admin and React simplifies the account managing in order to make managing, disabling and password resetting automated.

Modern, kapsamlı Active Directory güvenlik analizi ve raporlama aracı. PowerShell AD kontrollerini Python'a dönüştürür ve güzel HTML raporları oluşturur.

This script will scan your AD and Export a CSV list of Pcs that have not had activity, prior to your set number of days tolerance you input.

An Active Directory delegation and DACL analysis tool for security assessments. It extracts AD security descriptors, resolves permissions, identifies insecure delegations against Tier 0 assets, and exports risk-scored findings to CSV.

PowerShell module for Active Directory auditing — structured discovery, graded findings, HTML reports

Security audit tool for Active Directory. Automates a lot of checks from a pentester perspective.

AttackPathCanvas — Visualize Identity Attack Paths in Active Directory

DelegationCanvas — Map Every Permission in Your Active Directory

Active Directory LDAP Security Auditor with AI-Powered Analysis - By Ayi NEDJIMI

Detect Active Directory attacks on Windows by monitoring Security Event Logs in real time and triggering alerts for suspicious activity.

post-exploitation tool for computer object takeover via Resource-Based Constrained Delegation modify msDS-AllowedToActOnBehalfOfOtherIdentity attributes to abuse Kerberos delegation and escalate privileges in Active Directory.

Computer object takeover through Resource-Based Constrained Delegation msDS-AllowedToActOnBehalfOfOtherIdentity