Orange-Cyberdefense/GOAD resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

8240 stars · 1126 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

GOAD (Game Of Active Directory) is a pentest lab project that provisions intentionally vulnerable Active Directory environments using Vagrant, Ansible, and Terraform. It provides multiple lab configurations of varying sizes so pentesters can practice common AD attack techniques locally.

Use cases

• practice active directory attack techniques in a safe lab
• build a vulnerable AD environment for pentest training
• learn kerberoasting, delegation attacks, and domain escalation
• set up a multi-domain multi-forest test lab with vagrant
• train for AD-focused certifications like CRTP or OSCP
• test red team tooling against a realistic AD setup

When to choose

• you need a realistic, intentionally vulnerable Active Directory lab for practice
• you want automated lab deployment with Vagrant/Ansible/Terraform
• you are training pentesters or preparing for AD attack certifications

When to avoid

• you need a hardened production Active Directory template - the lab is deliberately insecure
• you lack the hardware resources to run multiple Windows VMs
• you need a cloud-hosted or internet-exposed environment - it must be isolated

Facets

infra-config · maturity active

infrastructure-as-code penetration-testing security security penetration-testing windows active-directory pentest-lab ansible terraform vagrant vulnerable-by-design training-lab devops linux macos virtualbox

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Orange-Cyberdefense/GOAD")