Kevin-Robertson/Powermad

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1500 stars · 190 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Powermad is a set of PowerShell functions for exploiting Active Directory's default MachineAccountQuota and Active Directory-Integrated DNS (ADIDNS) settings. It enables adding machine accounts via raw LDAP requests and manipulating DNS records without joining a system to the domain.

Use cases

• add a machine account to active directory without joining a domain
• exploit default machine account quota in a pentest
• poison active directory integrated dns records
• enumerate machine accounts created by unprivileged users
• perform adidns wildcard record attacks
• red team active directory enumeration and abuse

When to choose

• you are doing authorized Active Directory penetration testing or red teaming
• you need to abuse ms-DS-MachineAccountQuota or ADIDNS from Windows with PowerShell
• you want to test whether domain users can create machine accounts or modify DNS records

When to avoid

• you need defensive monitoring rather than offensive tooling
• your target is not an Active Directory environment
• you require a maintained tool with frequent updates - the latest release is from early 2023

Facets

cli-tool · maturity maintenance

security penetration-testing networking security penetration-testing windows windows cli active-directory powershell red-team dns machine-account-quota adidns ldap

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Kevin-Robertson/Powermad")