NetSPI/PowerHuntShares

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1052 stars · 117 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PowerHuntShares is a PowerShell audit tool that inventories, analyzes, and reports excessive privileges on SMB share ACLs across Active Directory domains. It discovers accessible domain systems, collects share ACL data, and generates HTML/CSV reports with risk prioritization, including optional LLM-based share fingerprinting.

Use cases

• audit SMB share permissions across an Active Directory domain
• find shares with Everyone or Domain Users excessive privileges
• inventory network share ACLs during a penetration test
• generate HTML and CSV reports of risky share permissions
• discover accessible domain computers with open SMB ports
• prioritize remediation of high-risk share ACLs

When to choose

• you are a pentester or defender auditing SMB share permissions in an AD environment
• you need automated discovery and ACL collection across many domain systems
• you want statistical and LLM-assisted risk context for share misconfigurations

When to avoid

• you need auditing of non-Windows file servers or non-SMB protocols
• you lack Windows/PowerShell or appropriate domain credentials
• you need a continuous monitoring solution rather than point-in-time audits

Facets

cli-tool · maturity active

security penetration-testing vulnerability-scanning osint security penetration-testing developer-tools windows windows cli smb-shares active-directory share-acl excessive-privileges powershell audit llm-analysis

Member repositories

For agents

markdown · JSON · MCP: product_card(name="NetSPI/PowerHuntShares")