kerberoasting

Free Active Directory pentesting tool for Linux. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports. No Windows needed.

Roast in the Middle

An in-depth guide to help people who are new to penetration testing or red teaming and are looking to gain an overview of the penetration testing process. This guide will focus on both the penetration testing and red team process and contain detailed information.

This is CheatSheet which I used on PJPT exam to fully compromise Domain Controller by doing internal network penentration testing.

Active Directory kerberos attack framworks.

Kerberos Attacks From Networks or Domain controller log Perspective through HMAC in exchanges.

内网集权系统渗透测试笔记

Kerberos attack path-ways management

Example of Kerberoasting Honeypot

ACL Pentesting frameworks

Offensive tool for guessing Active Directory credentials via Kerberos

Multi-protocol Active Directory (LDAP, SMB, SAMR) enumerator

Kerberoasting and AS-REP Roasting

Kerberoasting

Active Directory attack simulation demonstrating LDAP/SMB enumeration, credential harvesting, lateral movement, Kerberos abuse, Resource-Based Constrained Delegation (RBCD), and Domain Administrator privilege escalation in a TryHackMe lab.

A golang toolkit for offensive Active Directory CTF/Pentest.

Active Directory Penetration Testing Suite for enumerating and exploiting AD environments.

Automatización de la cadena de ataque completa a Active Directory (recon → AS-REP/Kerberoasting → cracking → post-explotación) basada en el OCD AD Attack Mindmap 2025.

Windows service that monitors Active Directory in real time and alerts on 8 live attack techniques — Kerberoasting, Pass-the-Hash, DCSync, Golden Ticket, LDAP Recon, AS-REP Roasting, Skeleton Key, and Audit Log tampering. Built in Python using Windows Security Event Log analysis.

A highly structured, AI-compatible reference guide for Active Directory exploitation and post-exploitation workflows using NetExec.