yen5004 / adautomator

       d8888 8888888b.                    888                                   888                    
      d88888 888  "Y88b                   888                                   888                    
     d88P888 888    888                   888                                   888                    
    d88P 888 888    888  8888b.  888  888 888888 .d88b.  88888b.d88b.   8888b.  888888 .d88b.  888d888 
   d88P  888 888    888     "88b 888  888 888   d88""88b 888 "888 "88b     "88b 888   d88""88b 888P"   
  d88P   888 888    888 .d888888 888  888 888   888  888 888  888  888 .d888888 888   888  888 888     
 d8888888888 888  .d88P 888  888 Y88b 888 Y88b. Y88..88P 888  888  888 888  888 Y88b. Y88..88P 888     
d88P     888 8888888P"  "Y888888  "Y88888  "Y888 "Y88P"  888  888  888 "Y888888  "Y888 "Y88P"  888

Overview

ADautomator is a comprehensive toolkit designed for cybersecurity professionals focusing on Active Directory environments. It automates various tasks related to Active Directory security, including package installation, domain enumeration, and advanced network analysis. The tool is built in Python and integrates various external tools and scripts, making it a versatile solution for network administrators and security experts. It was also designed to be used with the netexec version from the kali linux repo.

This tool will not automatically exploit a vulnerability and should be allowed to use on popular penetration testing certifications such as PNPT and OSCP. This can easily be done, but I wont include that capability for public use.

---

Key Features

• Automated Package Installation: Streamlines the setup process by installing essential tools like seclists, netexec, ntpdate, and python3-impacket.
• Facilitates thorough scanning and enumeration of Active Directory domains.
• Includes features for detecting lockout policies, finding NTLM hash segments, and identifying potential vulnerabilities.
• Automated SMB and LDAP protocol penetration testing via netexec.
• Output Management: Capable of redirecting output to files for further analysis.
• User Interaction and Alerts: Provides interactive prompts and color-coded alerts to inform users about critical findings or potential risks.

How to use ADautomator

Installation

python3 ADautomator.py --install

Get Help

python3 ADautomator.py -h

Basic Commands

• Run an anonymous scan on the AD network

python3 ADautomator.py --adnuke -ip [IP_ADDRESS]

• Execute a full frontal attack on the Active Directory network

python3 ADautomator.py --adnuke -ip [IP_ADDRESS] -u [USERNAME] -p [PASSWORD] -out [OUTPUT_FILE]

Upcoming Features!!

• Cradle to grave Active Directory Penetration testing using netexec
• The use of kerbrute to gather usernames
• Automated password and username spraying after usernames are identified
• Additional modules including mssql, winrm, ssh, and ftp

Help

Detects Domain Lockout Policy with user input to understand the danger

Get Hashes to use in a pass the hash attack or login with PSexec

Get users and save them to a file

Untitled.video.mp4