Full AD pentest + audit tool in Rust, single static binary. Whole DCE/RPC · NTLM · SMB2 · Kerberos stack written from scratch (no impacket) — split into 4 reusable MIT crates on crates.io. Audits a domain (control-path graph, 10/16 AD CS ESC classes, MITRE-tagged) and validates findings end-to-end: DCSync, golden/silver tickets, pass-the-ticket to SYSTEM, LAPS, WinRM, ADCS. Live-validated against a fully-patched Windows Server 2025 DC. MIT, v1.1.0.
github.com/icedracon/adhammer
Top comments (0)