# clr2of8/DPAT

Domain Password Audit Tool for Pentesters

Repository: https://github.com/clr2of8/DPAT
Canonical: https://ross.abutalabs.com/products/dpat
Language: Python
License: MIT
License Family: permissive
Last push: 2025-12-24T05:10:42+00:00

## Health v2 (maintenance only)
Score: 58/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 58, release rhythm 35, longevity 100
- inputs: {"age_days": 3571, "days_push": 252, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1065, forks 166 (observed 2026-08-28T04:03:26.777556+00:00)

## What it is
DPAT is a Python-based Domain Password Audit Tool for penetration testers that analyzes NTDS password dumps combined with cracking results from tools like Hashcat or John the Ripper. It generates interactive HTML reports showing password reuse, length distributions, policy violations, and group-based statistics for Active Directory environments.

## Use cases
- audit active directory password strength from ntds dumps
- generate html report of cracked domain passwords
- find password reuse and policy violations in a domain
- analyze kerberoastable service account passwords
- sanitize password audit reports for client sharing

## When to choose
- you have NTDS.dit/secretsdump output and cracked hashes and need a comprehensive audit report
- you need group membership and Kerberoastable account insights in password audits
- you want a shareable, sanitized HTML report for pentest deliverables

## When to avoid
- you need to crack passwords yourself rather than analyze existing cracking results
- you are auditing non-Active Directory password stores
- you want a GUI-based password auditing tool

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, analytics
- domain: security, penetration-testing, developer-tools
- platform: python, cli, cross-platform
- tags: password-audit, active-directory, ntds, password-cracking, html-report, pentesting, reporting

## Member repositories
- clr2of8/DPAT (main) score 58

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:26.777556+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:55:29.271943+00:00, confidence not recorded.
  - readme: https://github.com/clr2of8/DPAT (fetched 2026-08-28T04:03:26.777556+00:00, sha 16a8e2fe499d)
- Data as of 2026-08-30T08:39:29.467469+00:00.