ReversecLabs/SharpGPOAbuse

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1353 stars · 154 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

SharpGPOAbuse is a C# .NET command-line tool that abuses a user's edit rights on a Group Policy Object to compromise objects controlled by that GPO. It supports attacks such as adding local admins, user rights, logon scripts, and immediate scheduled tasks.

Use cases

• abuse edit rights on a GPO during a penetration test
• add a user to the local administrators group via Group Policy
• add malicious startup or logon scripts through a GPO
• grant a user additional privileges via GPO user rights
• demonstrate GPO-based privilege escalation risks to clients

When to choose

• you are red teaming or pentesting an Active Directory environment and have write access to a GPO
• you need a quick C# tool to demonstrate GPO abuse on Windows
• you want to show impact of overly permissive GPO edit rights

When to avoid

• you need a defensive tool to audit or harden GPO permissions
• you are on a non-Windows environment without .NET support
• you need a maintained tool with an active release cycle or license

Facets

cli-tool · maturity maintenance

security penetration-testing security penetration-testing windows windows dotnet cli active-directory group-policy gpo-abuse red-team privilege-escalation offensive-security

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ReversecLabs/SharpGPOAbuse")