Orange-Cyberdefense / GOAD
git clone https://github.com/Orange-Cyberdefense/GOAD.git
🔥 on GitHub Trending today
Deployable vulnerable Active Directory lab environments for practicing pentest attack techniques.
Why you might care
Gives pentesters a ready-to-use, intentionally vulnerable AD environment built with Vagrant, Terraform and Ansible, in several sizes from a 2-VM minilab to a 5-VM two-forest setup. It includes challenge labs with no provided schema. Deploy only in isolation, as the lab is extremely vulnerable and Windows VMs use 180-day evaluation licenses.
+2
stars, 24h · #9,833
+~28
stars, 7 days · #6,225
+179
stars, 30 days · #4,406
8.5k
★ total · +0% this week
1.2k
forks · 120 open issues
Star history (as recorded here)
LanguagePowerShell
LicenseGPL-3.0
Created2021-09-27 (5y ago)
Last push7mo ago
Watchers101
OwnerOrganization
Seen on GitHub Trending
- 2026-10-23 — #9 daily in powershell · +6 ★
- 2026-10-23 — #6 monthly in powershell · +179 ★
- 2026-10-22 — #2 daily in powershell · +8 ★
- 2026-10-22 — #7 monthly in powershell · +175 ★
- 2026-10-21 — #5 daily in powershell · +10 ★
- 2026-10-21 — #9 monthly in powershell · +177 ★
- 2026-10-20 — #4 daily in powershell · +10 ★
- 2026-10-20 — #9 monthly in powershell · +183 ★
GitHub topics
Links
README excerpt
**GOAD (v3)** :bookmark: Documentation : https://orange-cyberdefense.github.io/GOAD/ ## Description GOAD is a pentest active directory LAB project. The purpose of this lab is to give pentesters a vulnerable Active directory environment ready to use to practice usual attack techniques. > [!CAUTION] > This lab is extremely vulnerable, do not reuse recipe to build your environment and do not deploy this environment on internet without isolation (this is a recommendation, use it as your own risk). > This repository was build for pentest practice. ## Licenses This lab use free Windows VM only (180 days). After that delay enter a license on each server or rebuild all the lab (may be it's time for an update ;)) ## Available labs - GOAD Lab family and extensions overview - GOAD : 5 vms, 2 forests, 3 domains (full goad lab) - GOAD-Light : 3 vms, 1 forest, 2 domains (smaller goad lab for those with a smaller pc) - MINILAB: 2 vms, 1 forest, 1 domain (basic lab with one DC (windows server 2019) and one Workstation (windows 10)) - SCCM : 4 vms, 1 forest, 1 domain, with microsoft configuration manager installed - NHA : A challenge with 5 vms and 2 domains. no schema provided, you will have to find out how break it. - DRACARYS : A challenge with 3 vms and 1 domains. no schema provided, you will have to find out how break it.
Blurb generated by claude-haiku-5-5 today. Star deltas marked ~ are extrapolated from partial history.