d8888 8888888b. 888 888
d88888 888 "Y88b 888 888
d88P888 888 888 888 888
d88P 888 888 888 8888b. 888 888 888888 .d88b. 88888b.d88b. 8888b. 888888 .d88b. 888d888
d88P 888 888 888 "88b 888 888 888 d88""88b 888 "888 "88b "88b 888 d88""88b 888P"
d88P 888 888 888 .d888888 888 888 888 888 888 888 888 888 .d888888 888 888 888 888
d8888888888 888 .d88P 888 888 Y88b 888 Y88b. Y88..88P 888 888 888 888 888 Y88b. Y88..88P 888
d88P 888 8888888P" "Y888888 "Y88888 "Y888 "Y88P" 888 888 888 "Y888888 "Y888 "Y88P" 888
ADautomator is a comprehensive toolkit designed for cybersecurity professionals focusing on Active Directory environments. It automates various tasks related to Active Directory security, including package installation, domain enumeration, and advanced network analysis. The tool is built in Python and integrates various external tools and scripts, making it a versatile solution for network administrators and security experts. It was also designed to be used with the netexec version from the kali linux repo.
This tool will not automatically exploit a vulnerability and should be allowed to use on popular penetration testing certifications such as PNPT and OSCP. This can easily be done, but I wont include that capability for public use.
- Automated Package Installation: Streamlines the setup process by installing essential tools like seclists, netexec, ntpdate, and python3-impacket.
- Facilitates thorough scanning and enumeration of Active Directory domains.
- Includes features for detecting lockout policies, finding NTLM hash segments, and identifying potential vulnerabilities.
- Automated SMB and LDAP protocol penetration testing via netexec.
- Output Management: Capable of redirecting output to files for further analysis.
- User Interaction and Alerts: Provides interactive prompts and color-coded alerts to inform users about critical findings or potential risks.
python3 ADautomator.py --install
python3 ADautomator.py -h
- Run an anonymous scan on the AD network
python3 ADautomator.py --adnuke -ip [IP_ADDRESS]
- Execute a full frontal attack on the Active Directory network
python3 ADautomator.py --adnuke -ip [IP_ADDRESS] -u [USERNAME] -p [PASSWORD] -out [OUTPUT_FILE]
- Cradle to grave Active Directory Penetration testing using netexec
- The use of kerbrute to gather usernames
- Automated password and username spraying after usernames are identified
- Additional modules including mssql, winrm, ssh, and ftp