{"id":26896701,"url":"https://github.com/m0n1x90/ADReaper","last_synced_at":"2025-04-01T04:01:33.727Z","repository":{"id":238606548,"uuid":"464995955","full_name":"m0n1x90/ADReaper","owner":"m0n1x90","description":"A fast enumeration tool for Windows Active Directory Pentesting written in Go","archived":false,"fork":false,"pushed_at":"2023-01-14T15:01:36.000Z","size":41,"stargazers_count":279,"open_issues_count":4,"forks_count":38,"subscribers_count":8,"default_branch":"main","last_synced_at":"2025-02-13T19:41:42.656Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/m0n1x90.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-03-01T17:41:22.000Z","updated_at":"2025-01-30T14:04:54.000Z","dependencies_parsed_at":"2024-05-07T02:30:36.961Z","dependency_job_id":"33647cae-9d02-4900-a206-16e53c28bd3e","html_url":"https://github.com/m0n1x90/ADReaper","commit_stats":null,"previous_names":["aidenpearce369/adreaper","m0n1x90/adreaper"],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/m0n1x90%2FADReaper","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/m0n1x90%2FADReaper/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/m0n1x90%2FADReaper/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/m0n1x90%2FADReaper/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/m0n1x90","download_url":"https://codeload.github.com/m0n1x90/ADReaper/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246580463,"owners_count":20800110,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-04-01T04:01:32.715Z","updated_at":"2025-04-01T04:01:33.719Z","avatar_url":"https://github.com/m0n1x90.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"# ADReaper\n\n```ADReaper``` is a tool written in ```Golang``` which enumerates an Active Directory environment with LDAP queries within few seconds\n\n## Installation \n\nYou can download precompiled executable binaries for Windows/Linux from [latest releases](https://github.com/AidenPearce369/ADReaper/releases/tag/ADReaper)\n\n### Install from source\n\nTo build from source, clone the repo and build it with GO\n\n```c\n$ git clone https://github.com/AidenPearce369/ADReaper\n$ cd ADReaper/\n$ go build\n```\n\n## Usage\n\nADReaper performs enumeration with various commands that performs LDAP queries with respective to it\n\n```c\nPS C:\\Users\\redteamer\\Desktop\\shared\u003e .\\ADReaper.exe\n\n      -command string\n\n            Command to run\n                  dc              - to list domain controllers\n                  domain-trust    - to list domain trust\n                  users           - to list all users\n                  computers       - to list all computers\n                  groups          - to list all groups with members\n                  spn             - to list service principal objects\n                  never-loggedon  - to list users never logged on\n                  gpo             - to list group policy objects\n                  ou              - to list organizational units\n                  ms-sql          - to list MS-SQL servers\n                  asreproast      - to list AS-REP roastable accounts\n                  unconstrained   - to list Unconstrained Delegated accounts\n                  admin-priv      - to list AD objects with admin privilege\n\n      -dc string\n\n            Enter the DC\n\n      -filter string\n\n            Filters to use for users/groups/computers\n\n            list - lists all objects only\n            full-data - list all objects with properties\n            membership - lists all members from an object\n\n            (default \"list\")\n      -name string\n\n            Pass object name of user/group/computer\n\n      -password string\n\n            Enter the Password\n\n      -user string\n\n            Enter the Username\n```\n\nTo query the properties of ```Domain Controller``` of the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command dc\n```\n\nTo query the ```Trust Attributes``` of the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command domain-trust\n```\n\nTo list all ```Users``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command users\n```\n\nTo list all ```Users``` with attributes from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command users -filter full-data\n```\n\nTo list attributes of ```Specific Users``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command users -name \u003cuser\u003e\n```\n\nTo list the membership of the Specific User,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command users -name \u003cuser\u003e -filter membership\n```\n\nTo list all available ```Computers``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command computers\n```\n\nTo list all ```Computers``` with attributes from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command computers -filter full-data\n```\n\nTo list attributes of ```Specific Computer``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command computers -name \u003ccomputer name\u003e\n```\n\nTo list all available ```Groups``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command groups\n```\n\nTo list all ```Groups``` with attributes from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command groups -filter full-data\n```\n\nTo list attributes of ```Specific Group``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command groups -name \u003cgroup name\u003e\n```\n\nTo list members of ```Specific Group``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command groups -name \u003cgroup name\u003e -filter membership\n```\n\nTo list users ```Never Logged On``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command never-loggedon\n```\n\nTo list ```GPOs``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command gpo\n```\n\nTo list ```OUs``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command ou\n```\n\nTo list AD objects with higher privileges,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command admin-priv\n```\n\nTo list ```MS-SQL Servers``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command ms-sql\n```\n\nTo list all attributes of ```MS-SQL Servers``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command ms-sql -filter full-data\n```\n\nTo list all attributes of specific ```MS-SQL Server``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command ms-sql -name \u003ccomputer name\u003e \n```\n\nTo list ```SPNs``` available in the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command spn\n```\n\nTo list all attributes of ```Specific SPN``` from the domain,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command spn -name \u003csam of spn\u003e\n```\n\nTo list AD objects with ```Unconstrained Delegation``` enabled,\n\n```c\n.\\ADReaper.exe -dc \u003cdc.domain\u003e -user \u003cusername\u003e -password \u003cpassword\u003e -command unconstrained \n```\n\n## To-Do\n\nLooking forward for contributors to build the next version\n\nPlanned features,\n- Custom LDAP querying\n- Filters LDAP attributes with existing commands\n- LAPS enumeration\n- Kerberoasting SPNs\n- AS-REP Roasting SPNs\n- Local admin access hunting\n- ACL enumeration\n- Exporting JSON data for BloodHound\n\nIf interested, ping me :)\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fm0n1x90%2FADReaper","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fm0n1x90%2FADReaper","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fm0n1x90%2FADReaper/lists"}