byt3bl33d3r/DeathStar

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1618 stars · 321 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

DeathStar is a Python CLI tool that automates gaining Domain and Enterprise Admin privileges in Active Directory environments by chaining common offensive TTPs via Empire's RESTful API. It features an asynchronous architecture, multi-domain/forest support, active monitoring of compromised hosts, and a plugin system (Kyber Crystals) for extending functionality.

Use cases

• automate privilege escalation to Domain Admin in Active Directory
• demonstrate how AD misconfigurations can be chained into full compromise
• run automated attack paths during red team engagements
• monitor compromised machines for new logins and adapt attack paths
• extend automated AD attack techniques with custom plugins
• test Active Directory defenses against common offensive TTPs

When to choose

• you need automated Domain/Enterprise Admin escalation in an AD environment during authorized pentests
• you already use the BC-Security Empire C2 framework and want to automate privilege escalation
• you want to demonstrate the impact of chained AD misconfigurations to clients
• you need multi-domain and multi-forest attack path automation

When to avoid

• you need a general-purpose vulnerability scanner or full pentest framework
• your target is not an Active Directory environment
• you want actively developed tooling with frequent updates
• you lack authorization to test the target environment

Facets

cli-tool · maturity maintenance

security penetration-testing workflow-automation plugin-system security penetration-testing networking python cli windows active-directory empire privilege-escalation red-team offensive-security domain-admin asyncio docker linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="byt3bl33d3r/DeathStar")