CravateRouge/bloodyAD

Health v2 · maintenance only

Adoption not part of the score

2275 stars · 216 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

bloodyAD is a Python CLI tool for Active Directory privilege escalation that performs specific LDAP calls against domain controllers. It supports multiple authentication methods including cleartext passwords, pass-the-hash, pass-the-ticket, and certificates.

Use cases

• escalate privileges in an active directory domain
• modify AD object attributes via LDAP
• reset another user's password in the domain
• perform shadow credential attacks
• run AD attacks through a SOCKS proxy
• enumerate and manipulate domain controller objects

When to choose

• you need a scriptable CLI for AD privesc via LDAP
• you want pass-the-hash or certificate-based authentication support
• you need to route AD attacks through a SOCKS proxy
• you want a modern alternative to PowerView for Linux

When to avoid

• you need a GUI or automated end-to-end privesc path (see autobloody instead)
• the target is not an Active Directory environment
• you only need passive AD enumeration without modification capabilities

Facets

cli-tool · maturity active

security penetration-testing cli security penetration-testing developer-tools python cli cross-platform active-directory ldap privilege-escalation pentesting pass-the-hash windows

Member repositories

For agents

markdown · JSON · MCP: product_card(name="CravateRouge/bloodyAD")