# DanMcInerney/icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

Repository: https://github.com/DanMcInerney/icebreaker
Canonical: https://ross.abutalabs.com/products/icebreaker
Language: PowerShell
License: MIT
License Family: permissive
Last push: 2018-10-24T18:14:53+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3194, "days_push": 2870, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1185, forks 159 (observed 2026-08-28T04:03:54.891650+00:00)

## What it is
A PowerShell-based penetration testing tool that automates five internal network attacks against Active Directory to obtain plaintext credentials when the attacker is on the network but outside the AD environment. It chains techniques like reverse bruteforce, share uploads, broadcast protocol poisoning, SMB relay, and IPv6 DNS poisoning, auto-cracking captured NetNTLMv2 hashes with JohnTheRipper.

## Use cases
- get plaintext active directory credentials from inside a network
- automate AD password attacks during a pentest
- capture and crack NetNTLMv2 hashes
- poison LLMNR and NBT-NS to grab passwords
- escalate to domain admin automatically after gaining a foothold
- find weak AD passwords via reverse bruteforce

## When to choose
- you are on an internal network with no AD credentials and need a foothold
- you want one tool that chains multiple AD credential attacks automatically
- you need automated hash cracking with an AD-specific wordlist

## When to avoid
- you need a maintained tool - the last release was 2018 and many dependencies may be outdated
- you are not authorized to test the target network
- you only need passive network monitoring rather than active credential attacks

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: penetration-testing, security, networking
- domain: security, penetration-testing, networking
- platform: cli
- tags: active-directory, credential-harvesting, pentest, netntlmv2, password-cracking, powershell, linux

## Member repositories
- DanMcInerney/icebreaker (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:54.891650+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:24:06.154719+00:00, confidence not recorded.
  - readme: https://github.com/DanMcInerney/icebreaker (fetched 2026-08-28T04:03:54.891650+00:00, sha c17014774862)
- Data as of 2026-08-30T08:39:29.467469+00:00.