adcs 开源项目推荐（159 个）

ly4k /Certipy

用于 Active Directory Certificate Services 枚举与滥用的工具

lefayjey /linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

jakehildreth /Locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

NH-RED-TEAM /RustHound

Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀

ADScanPro /adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

g0h4n /RustHound-CE

Active Directory data ingestor via LDAP(S) or ADWS protocol for BloodHound Community Edition written in Rust. 🦀

Crypt32 /PSPKI

PowerShell PKI Module

Sleepw4lker /TameMyCerts

Policy Module for Microsoft Active Directory Certificate Services

NetSPI /AD-PathFinder

Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

ADScanPro /Claude-AD

Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), with per-technique OPSEC/telemetry notes. Drives netexec, impacket, certipy, bloodyAD, BloodHound CE.

Macmod /flashingestor

A TUI for Active Directory collection.

arth0sz /Practice-AD-CS-Domain-Escalation

Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.

jakehildreth /Locksmith2

An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers

icedracon /adhammer

Active Directory security assessment in Rust: directory discovery, Tier-0 path analysis, supported validation, and evidence reporting.

nettitude /TokenCert

TokenCert

Sleepw4lker /PSCertificateEnrollment

PowerShell Module to ease requesting certificates on Windows

Get-ADPen /EXECTRINITY

Active Directory kerberos attack framworks.

Hagrid29 /CertifyKit

Active Directory certificate abuse

Sleepw4lker /TameMyCerts.REST

REST API for Microsoft Active Directory Certificate Services

leocelente /leo-adcs-simulator

Orbit, Rigid Body Dynamics and Magnetic field simulation for Low-Earth-Orbit Spacecraft