ads_simulation_tool - A comprehensive Rust-based tool for simulating Act

项目说明

Acti Attack Simulation Tool

A comprehensi tool for simulating Acti attacks, designed for security professionals, penetration testers, and red team operators to assess AD security posture and test defensi.

⚠️ Legal Disclaimer

This tool is designed for authorized security testing only. Users must ensure they ha permission to test the target systems. Unauthorized use may local, state, and federal laws. The authors assume no liability for misuse.

Features

🎯 Attack Simulations

Kerberoasting Automation: Identifies and extracts service account credentials

BloodHound Data Collector Alternative: Maps AD attack paths and relationships

Golden Ticket Detection Simulator: Tests detection capabilities against golden ticket attacks

AD CS Attack Automation: Exploits Certificate Services (ESC1-ESC8)

🔍 Detection & Analysis

Comprehensi assessment

Attack path analysis and mapping

Detection indicator generation

Mitigation recommendations

Detailed security reporting

Installation

Prerequisites

Rust 1.70 or higher

Access to target Acti en

Valid domain credentials

Build from Source

Usage

Basic Usage

Ad Configuration

Create a config.json file to customize behavior:

Attack Modules

1. Kerberoasting (kerberoast)

Identifies service accounts with Service Principal Names (SPNs) and simulates ticket extraction for offline password cracking.

Features:

SPN enumeration via LDAP

Service account pri assessment

prioritization

Encryption type analysis

Example:

2. BloodHound Data Collection (bloodhound)

Gathers comprehensive AD data for attack path analysis, compatible with BloodHound tools.

Data Collected:

Users, groups, and computers

Group memberships and relationships

Session information

Local administrator mappings

Access Control Lists (ACLs)

Example:

3. Golden Ticket Simulation (golden-ticket)

Simulates golden ticket attacks to test detection capabilities and identify security gaps.

Capabilities:

Attack scenario generation

Detection indicator creation

Timeline analysis

Mitigation recommendations

Example:

4. AD CS Attacks (adcs)

Identifies and exploits Acti Certificate Services including ESC1-ESC8 attack .

Attack Types:

ESC1: Misconfigured certificate templates

ESC2: Any Purpose EKU abuse

ESC4: template ACLs

ESC6: EDITF_ATTRIBUTESUBJECTALTNAME2 flag abuse

And more...

Example:

Output Formats

JSON Output

Detailed machine-readable results suitable for integration with other tools:

Results saved to:

kerberoasting_results.json

bloodhound_data.json

golden_ticket_simulation.json

adcs_attack_results.json

Human-Readable Output

Formatted console output with key findings and recommendations.

Security Considerations

Safe Testing

Always use isolated test en when possible

Implement proper access controls and monitoring

Document all testing acti

Follow responsible disclosure practices

Detection Indicators

The tool generates detection signatures to help blue teams identify:

Unusual LDAP queries

Abnormal Kerberos ticket requests

Suspicious certificate enrollments

Pri escalation attempts

Contributing

We welcome contributions from the security community:

1. Fork the repository
2. Create a feature branch
3. Implement changes with appropriate tests
4. Submit a pull request

De Guidelines

Follow Rust best practices and con

Include comprehensi handling

Add appropriate logging and documentation

Ensure code is well-tested

License

This project is licensed under the MIT License. See LICENSE file for details.

Acknowledgments

Microsoft Security team for AD security research

BloodHound project for attack path analysis concepts

Security researchers who identified AD CS

The Rust security community

Support

For questions, issues, or feature requests:

Create an issue in the GitHub repository

Review existing documentation

Contact the de team

---

Remember: This tool should only be used in authorized en for legitimate security testing purposes.

项目信息

开发语言：Rust

Star 数：1

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A comprehensive Rust-based tool for simulating Active Directory attacks, designed for security professionals, penetration testers, and red team operators to assess AD security posture and test defensive capabilities.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。