sense-of-security/ADRecon

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1929 stars · 298 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

ADRecon is a PowerShell-based tool that extracts a wide range of artefacts from an Active Directory environment, including users, groups, trusts, GPOs, DNS, ACLs, and password policies. It generates a formatted Excel report with summary metrics to give auditors, DFIR teams, and penetration testers a holistic view of the target AD environment.

Use cases

• audit an Active Directory environment's security posture
• enumerate AD users, groups, and permissions during a penetration test
• generate an Excel report of domain controllers, trusts, and GPOs
• collect LAPS passwords and BitLocker recovery keys for assessment
• run post-exploitation recon as a standard domain user
• map ACLs and Kerberoastable accounts in a domain

When to choose

• you need a comprehensive point-in-time snapshot of an AD environment in a single report
• you are an auditor or pentester working from a non-domain or non-privileged workstation
• you want LDAP-based collection without requiring RSAT

When to avoid

• you need continuous AD monitoring rather than point-in-time collection
• your target is not a Windows Active Directory environment
• you need actively maintained tooling, as the last release was in 2020

Facets

cli-tool · maturity maintenance

security osint developer-tools security penetration-testing windows developer-tools windows cli active-directory reconnaissance pentesting ldap excel-report dfir audit reporting

Member repositories

For agents

markdown · JSON · MCP: product_card(name="sense-of-security/ADRecon")