Ridter/noPac

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1021 stars · 134 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python CLI exploit tool that chains CVE-2021-42278 and CVE-2021-42287 to escalate from a standard Active Directory domain user to Domain Admin. It can impersonate users, create computer accounts, dump hashes, and drop a semi-interactive shell via smbexec.

Use cases

• exploit CVE-2021-42278 and CVE-2021-42287 to get domain admin
• escalate privileges from a standard domain user in Active Directory
• dump domain controller hashes with secretsdump
• get a shell on a domain controller via smbexec
• test Active Directory domain controllers for the sAMAccountName spoofing vulnerability
• impersonate a domain admin user via Kerberos S4U2Self

When to choose

• you are doing authorized penetration testing or red teaming against an Active Directory environment vulnerable to CVE-2021-42278/42287
• you need an all-in-one tool that exploits, dumps hashes, and drops a shell
• you want a maintained fork of sam-the-admin with extra options like Kerberos auth and hash-based authentication

When to avoid

• the target domain controllers are patched for CVE-2021-42278 and CVE-2021-42287
• you need a general-purpose AD auditing tool rather than a specific exploit
• unauthorized use - this is an offensive security tool that should only be used with explicit permission

Facets

cli-tool · maturity maintenance

security penetration-testing cli security penetration-testing python cli active-directory privilege-escalation exploit cve-2021-42278 cve-2021-42287 domain-controller kerberos red-team linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Ridter/noPac")