ActiveDirectoryAttackTool - ADAT是一个小工具，用于帮助CTF球员

项目说明

Acti

Acti (ADAT) tool is used to assist CTF players and Penetration testers with helpful commands to run against an Acti Domain Controller. This tool is best utilized using a set of known working credentials against the host.
<br/>

Usage: General

Standard usage

<br/>

Usage with LDAP base search

<br/>

Usage with GitHub for script repositories (Target system has internet access)

<br/>

Usage: Systems with no internet access

If the system you are testing has no internet access or is a CTF machine, ADAT will download the required GitHub repositories to your attacking system. Ensure you specify the parameter and set both the LocalIP and LocalPort within the script to that of your attacking system.

ADAT will run a http python3 server on the attacking system using the LocalIP and LocalPort parameters.

<br/>

Usage: Standalone Windows Systems

Usage for non domain joined systems, whilst not officially supported by ADAT, many of the commands can be run against a standalone Windows system.

<br/>

Usage: Null Mode

Null mode is useful for when you do not have any valid usernames or credentials to run against the target Domain Controller.

<br/>

Supported Protocols

Some of the protocols ADAT prints out commands for:

DNS

Kerberos

LDAP

MSSQL

NTP

RDP

SMB

WinRM

<br/>

Supported Tools

Some of the tools ADAT prints out commands for:

BloodHound

Crackmapexec (Including modules and PowerShell commands)

Impacket toolset

Metasploit

Nmap

ldapdomaindump

ldapsearch

pywerview

xfreerdp

<br/>

ADAT produces commands for both external and internal usage.
<br/>

Examples

!image
!image
<br/>
<br/>
!image
!image

OSCP

ADAT is OSCP friendly, the commands it prints out might not be. Please be cautious about what commands and scripts invoke before running in an exam en.

Disclaimer

The resulting commands printed by ADAT should only be used within an authorized en. The author is not responsible for any damages caused.

项目信息

开发语言：Shell

Star 数：99

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕ADAT is a small tool used to assist CTF players and Penetration testers with easy commands to run against an Active Directory Domain Controller. This tool is is best utilized using a set of known credentials against the host.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。