Active Directory Python Packages

httpx-auth

Authentication classes to be used with httpx

requests-auth

Authentication classes to be used with requests

dsinternals

A Python native library containing necessary classes, functions and structures to interact with Windows Active Directory.

ms-active-directory

A library for integrating with Microsoft Active Directory domains

adscan

Free Active Directory pentesting tool and Linux CLI for AD enumeration, BloodHound, Kerberoasting, ADCS, DCSync, and attack paths.

django-auth-ldap3

A library for connecting Django's authentication system to an LDAP directory

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

pyadrecon-adws

An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.

pyadrecon

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.

evil-winrm-py

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

activedirectoryenum

Enumerate AD through LDAP with a collection of helpfull scripts being bundled

gpp-decrypt

Tool to parse the Group Policy Preferences XML file which extracts the username and decrypts the cpassword attribute.

ldapcherry

Web UI for managing users and groups in multiple directory services.

django-windowsauth

Easy integration and deployment of Django projects into Windows Environments.

goodhound

Attackers think in graphs, defenders think in actions, management think in charts. GoodHound operationalises Bloodhound by determining the busiest paths to high value targets and creating actionable output to prioritise remediation of attack paths.

plumhound

BloodHoundAD reporting engine for Blue and Purple Teams

uciwebauth

Access UCI WebAuth, LDAP person records, and Active Directory user objects.

crack-o-matic

Find and notify users in your Active Directory with weak passwords

tattletale

Analyze secretsdump output and hashcat potfiles to find shared passwords and weak credentials in Active Directory

credwolf

Credential validation tool for Active Directory Domain Services.

client-of-redundant-servers

Generic client of redundant servers

koppla

A Model-Context-Protocol (MCP) Server for Active Directory

padc

cli using typer and python-ldap lib to create connections with Active Directory to manage users

profilehound

ProfileHound - BloodHound OpenGraph collector for user profiles stored on domain machines. Make informed decisions about looting secrets by identifying active user profiles on domain machines.