61106960/adPEAS

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1361 stars · 156 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

adPEAS is a single-file PowerShell tool that automates Active Directory security assessment, enumerating misconfigurations, vulnerabilities, and privilege escalation paths. Version 2 adds a native Kerberos stack, multiple authentication methods, offensive operations like Kerberoasting, and interactive HTML/JSON reporting.

Use cases

• enumerate active directory for privilege escalation paths
• find kerberoastable and as-rep roastable accounts
• audit adcs misconfigurations like esc1-esc15
• collect bloodhound data for attack path analysis
• run ad security checks without rsat or external modules
• perform red team assessment of a windows domain
• generate html report of active directory vulnerabilities

When to choose

• you need a dependency-free, single-file AD enumeration tool for Windows
• you are a penetration tester or red teamer assessing an Active Directory environment
• you want built-in offensive operations like Kerberoasting and ticket forging in pure PowerShell
• you need offline or air-gapped capability with no RSAT or ActiveDirectory module

When to avoid

• you need a GUI-based AD auditing product for compliance reporting
• you are hardening rather than assessing and want remediation guidance rather than enumeration
• your environment is not Windows or lacks PowerShell
• you require a licensed and supported enterprise tool with vendor backing

Facets

cli-tool · maturity active

security penetration-testing cli developer-tools security penetration-testing windows developer-tools windows cli active-directory powershell privilege-escalation kerberos red-team bloodhound adcs enumeration offensive-security

Member repositories

For agents

markdown · JSON · MCP: product_card(name="61106960/adPEAS")