https://github.com/000pp/hexodus
🟪 Hexodus is a Python framework project designed to enumerate and help in Active Directory attacks through Windows protocols like SMB, LDAP, WinRM and other.
https://github.com/000pp/hexodus
active-directory ldap ntlm pentest red-team smb windows
Last synced: 12 months ago
JSON representation
🟪 Hexodus is a Python framework project designed to enumerate and help in Active Directory attacks through Windows protocols like SMB, LDAP, WinRM and other.
- Host: GitHub
- URL: https://github.com/000pp/hexodus
- Owner: 000pp
- License: mit
- Created: 2025-05-20T03:35:50.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2025-06-16T20:12:07.000Z (12 months ago)
- Last Synced: 2025-06-16T21:24:14.046Z (12 months ago)
- Topics: active-directory, ldap, ntlm, pentest, red-team, smb, windows
- Language: Python
- Homepage:
- Size: 91.8 KB
- Stars: 2
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
README
Hexodus is a Python framework designed to enumerate Active Directory objects and assist with attacks using Windows protocols such as SMB, LDAP, RPC, and others. It uses an SQLite database to store collected data and a Flask-based web interface to make it easier to analyze the environment.
## Documentation
In the [documentation](https://github.com/000pp/hexodus/wiki), you can find guidance on how to use Hexodus commands, information on known errors reported by the community or by the developers, and possible solutions to those issues.
## Installation
We recommend using [pipx](https://github.com/pypa/pipx) to install the project, so you can run it from anywhere and make things easier.
### Linux
```
sudo apt install pipx git
pipx ensurepath
pix install git+https://github.com/000pp/hexodus
```
### MacOS
```
brew install pipx
pipx ensurepath
pix install git+https://github.com/000pp/hexodus
```
### Local
```
git clone https://github.com/000pp/hexodus.git
pipx install .
```
### Updating
```
pipx reinstall hexodus
```
## Usage
To start using Hexodus, you need to create a profile and configure the necessary information for LDAP and SMB binding. The basic usage is as follows:
1. Create a profile
```
hexodus -c
hexodus -c corp corp.local john.doe 'NewPassword123!'
```
2. Test the connection or run a module
```
hexodus corp ldap 192.168.15.52
hexodus corp ldap 192.168.15.52 users
hexodus corp smb 192.168.52.52 share
```
You can also list the available modules for each protocol by using `list` in place of the host argument:
```
hexodus corp ldap list
hexodus corp smb list
```
To start or stop the webapp you use the `-s` and `-sw` flags:
```
hexodus -s (start the webapp)
hexodus -sw (stop the webapp)
```
## To-Do
- [ ] Add interactive smb client
- [ ] Add modules that uses WinRM protocol
- [ ] Add vulnerabilities modules (BadSucessor, Backup Operator and other)
- [ ] Add module to download/read files remotely
- [ ] Add support to IP networks and files as input
- [ ] Add support to Kerberos
- [x] Improve webview HTML and CSS
- [ ] Improve LDAP binding method
- [ ] Search for new protocols to use
- [ ] Automatize known-attacks (UnPAC the hash for example)
## Credits
- [NetExec](https://github.com/Pennyw0rth/NetExec)
- [Impacket](https://github.com/fortra/impacket)
- [SecTools](https://github.com/p0dalirius/sectools)