PowerShell toolkit for assessing DES/RC4 Kerberos encryption in Active Directory. Detects weak encryption across domain controllers, trusts, and event logs. Built for the January 2026 update and July 2026 RC4 removal deadlines.

AD April ’26 Check0r is a read-only PowerShell tool to assess on-prem AD for the April 2026 Kerberos RC4→AES change. It inventories SPN accounts, flags risky msDS-SupportedEncryptionTypes/KDC overrides, and collects DC System readiness events (201–209) to predict breakage and guide fixes.

Modern, kapsamlı Active Directory güvenlik analizi ve raporlama aracı. PowerShell AD kontrollerini Python'a dönüştürür ve güzel HTML raporları oluşturur.

AD-Descript0r is a Python tool for Active Directory reconnaissance. It authenticates against a Domain Controller, retrieves all usernames and their descriptions, and displays the results in a clean table with colored output

Active Directory assessment collector

Windows service that monitors Active Directory in real time and alerts on 8 live attack techniques — Kerberoasting, Pass-the-Hash, DCSync, Golden Ticket, LDAP Recon, AS-REP Roasting, Skeleton Key, and Audit Log tampering. Built in Python using Windows Security Event Log analysis.

https://securitree.xyz - deep dive into cybersec with well-structured notes.

PowerShell module for Active Directory auditing — structured discovery, graded findings, HTML reports

Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.

AR.PY - Admin and React simplifies the account managing in order to make managing, disabling and password resetting automated.

This script will scan your AD and Export a CSV list of Pcs that have not had activity, prior to your set number of days tolerance you input.

Security audit tool for Active Directory. Automates a lot of checks from a pentester perspective.

An Active Directory delegation and DACL analysis tool for security assessments. It extracts AD security descriptors, resolves permissions, identifies insecure delegations against Tier 0 assets, and exports risk-scored findings to CSV.

post-exploitation tool for computer object takeover via Resource-Based Constrained Delegation modify msDS-AllowedToActOnBehalfOfOtherIdentity attributes to abuse Kerberos delegation and escalate privileges in Active Directory.

AttackPathCanvas — Visualize Identity Attack Paths in Active Directory

DelegationCanvas — Map Every Permission in Your Active Directory

Active Directory LDAP Security Auditor with AI-Powered Analysis - By Ayi NEDJIMI

GitHub profile README for Benjamin Iheukumere

Detect Active Directory attacks on Windows by monitoring Security Event Logs in real time and triggering alerts for suspicious activity.

Computer object takeover through Resource-Based Constrained Delegation msDS-AllowedToActOnBehalfOfOtherIdentity