Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.
Samsung QN90B and QN90F root