safebuffer/vulnerable-AD

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2325 stars · 446 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A PowerShell script that configures a Windows Server domain controller into a deliberately vulnerable Active Directory environment for practicing AD attacks. It randomizes misconfigurations covering common attack techniques like Kerberoasting, DCSync, and Golden Ticket in a local lab.

Use cases

• set up a vulnerable active directory lab for practicing AD attacks
• practice kerberoasting and as-rep roasting locally
• test pass-the-hash and pass-the-ticket techniques
• learn active directory privilege escalation with ACL abuse
• create a safe environment for red team training
• practice DCSync and golden ticket attacks in a home lab
• train on password spraying against a test domain

When to choose

• you need a quick, scripted vulnerable AD domain for security training
• you want broad coverage of common AD attack techniques in one lab
• you already have a Windows Server domain controller to run it on

When to avoid

• you need a production-hardened Active Directory setup
• you cannot dedicate an isolated lab network or VM
• you want guided tutorials rather than a randomized vulnerable configuration

Facets

cli-tool · maturity active

security penetration-testing developer-tools security penetration-testing self-hosted windows cli active-directory red-team vulnerable-lab powershell ad-attacks training-lab

Member repositories

For agents

markdown · JSON · MCP: product_card(name="safebuffer/vulnerable-AD")