Make a vulnerable active directory that will enable you to test the majority of active directory attacks in your local lab.
Main Features:
- Complete coverage of the mentioned assaults.
- Randomize attacks.
- Some attacks need the use of a user workstation.
- The script needs to be executed in a DC with Active Directory installed.
Supported Attacks:
- Kerberoasting
- Abusing ACLs/ACEs
- Abuse DnsAdmins
- AS-REP Roasting
- User Objects With Default password (Changeme123!)
- Password in Object Description
- DCSync
- Password Spraying
- Golden Ticket
- Silver Ticket
- Pass-the-Ticket
- Pass-the-Hash
- SMB Signing Disabled
The intended use for the tool is strictly educational and should not be used for any other purpose.
Download Link: https://github.com/WazeHell/vulnerable-AD
