Free Active Directory pentesting tool for Linux. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports. No Windows needed.

gmsad manages Active Directory group Managed Service Account (gMSA) on Linux

Blog about recently introduced SecretManagement PowerShell module, our practical usage and code.

The AD Service Account Manager! This is a PowerShell script that simplifies the process of managing service accounts in an Active Directory environment. With this tool, you can create, modify, and remove Group Managed Service Accounts (gMSA) and Standard Service Accounts with ease.

PowerShell script to Dump GMSA Password blobs into RC4, 3DES and AES hash formats.

Script de implantação de conta de serviço gerenciado de grupo (gMSA).

AD (Active Directory) Service Account Manager is an enterprise-grade PowerShell framework that codifies identity lifecycle management and eliminates identity debt within Active Directory. It transitions organizations away from fragmented, manual service account management into a structured, audited, and automated governance model.

NHICanvas - Discover and Govern Non-Human Identities

Laboratorium administracji Windows Server: AD DS, DHCP, Hyper-V Replica, Failover Cluster, FSMO, gMSA, JEA, Storage Spaces i scenariusze infrastrukturalne.

Remote command execution with a healthy dose of detachment.

Automated cross-forest offline domain join (djoin) of Windows VMs on any platform - VMware, Hyper-V, Azure, AWS, GCP - via a gMSA web service. Works with Bicep, Terraform and Ansible. No double-hop, no credentials on the target.

🤖 Simple and different a system administration or post-exploitation tools written on Powershell or Batch that simplify work and dumping (extracting) data from Active Directory (LDAP).

ACME Registration Authority for ADCS — speaks ACME, holds no signing key, enrolls via /certsrv/ as a gMSA