PowerShell toolkit for assessing DES/RC4 Kerberos encryption in Active Directory. Detects weak encryption across domain controllers, trusts, and event logs. Built for the January 2026 update and July 2026 RC4 removal deadlines.

https://securitree.xyz - deep dive into cybersec with well-structured notes.

Windows service that monitors Active Directory in real time and alerts on 8 live attack techniques — Kerberoasting, Pass-the-Hash, DCSync, Golden Ticket, LDAP Recon, AS-REP Roasting, Skeleton Key, and Audit Log tampering. Built in Python using Windows Security Event Log analysis.

Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.

AR.PY - Admin and React simplifies the account managing in order to make managing, disabling and password resetting automated.

This script will scan your AD and Export a CSV list of Pcs that have not had activity, prior to your set number of days tolerance you input.

Modern, kapsamlı Active Directory güvenlik analizi ve raporlama aracı. PowerShell AD kontrollerini Python'a dönüştürür ve güzel HTML raporları oluşturur.

Active Directory LDAP Security Auditor with AI-Powered Analysis - By Ayi NEDJIMI

An Active Directory delegation and DACL analysis tool for security assessments. It extracts AD security descriptors, resolves permissions, identifies insecure delegations against Tier 0 assets, and exports risk-scored findings to CSV.

Security audit tool for Active Directory. Automates a lot of checks from a pentester perspective.

Detect Active Directory attacks on Windows by monitoring Security Event Logs in real time and triggering alerts for suspicious activity.

Computer object takeover through Resource-Based Constrained Delegation msDS-AllowedToActOnBehalfOfOtherIdentity