c3c/ADExplorerSnapshot

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1096 stars · 150 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python CLI tool that parses AD Explorer snapshot (.dat) files and converts them to BOFHound, BloodHound-compatible JSON, or NDJSON formats. It serves as an ingestor for BloodHound Active Directory attack-path analysis.

Use cases

• parse AD Explorer snapshots for BloodHound ingestion
• convert AD snapshot .dat files to BOFHound format
• dump all LDAP objects from an AD snapshot to NDJSON
• analyze Active Directory users, groups, computers, and trusts offline
• extract certificate templates and GPOs from AD snapshots
• map Active Directory attack paths from a snapshot

When to choose

• you have AD Explorer snapshots and want to feed them into BloodHound or BOFHound
• you need offline parsing of LDAP data collected from a domain controller
• you want to dump full AD object attributes to NDJSON for custom processing

When to avoid

• you need live network collection like session or localadmin data
• you want to collect data directly from domain controllers rather than existing snapshots
• you need GPO/OU collection in legacy BloodHound JSON mode

Facets

cli-tool · maturity active

parser security developer-tools security penetration-testing developer-tools python cli cross-platform active-directory bloodhound ldap ad-explorer bofhound nd red-team snapshot-parsing

Member repositories

For agents

markdown · JSON · MCP: product_card(name="c3c/ADExplorerSnapshot")