DanMcInerney/icebreaker

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1185 stars · 159 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A PowerShell-based penetration testing tool that automates five internal network attacks against Active Directory to obtain plaintext credentials when the attacker is on the network but outside the AD environment. It chains techniques like reverse bruteforce, share uploads, broadcast protocol poisoning, SMB relay, and IPv6 DNS poisoning, auto-cracking captured NetNTLMv2 hashes with JohnTheRipper.

Use cases

• get plaintext active directory credentials from inside a network
• automate AD password attacks during a pentest
• capture and crack NetNTLMv2 hashes
• poison LLMNR and NBT-NS to grab passwords
• escalate to domain admin automatically after gaining a foothold
• find weak AD passwords via reverse bruteforce

When to choose

• you are on an internal network with no AD credentials and need a foothold
• you want one tool that chains multiple AD credential attacks automatically
• you need automated hash cracking with an AD-specific wordlist

When to avoid

• you need a maintained tool - the last release was 2018 and many dependencies may be outdated
• you are not authorized to test the target network
• you only need passive network monitoring rather than active credential attacks

Facets

cli-tool · maturity maintenance

penetration-testing security networking security penetration-testing networking cli active-directory credential-harvesting pentest netntlmv2 password-cracking powershell linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="DanMcInerney/icebreaker")