Active Directory Python Packages

httpx-auth

Authentication classes to be used with httpx

requests-auth

Authentication classes to be used with requests

dsinternals

A Python native library containing necessary classes, functions and structures to interact with Windows Active Directory.

ms-active-directory

A library for integrating with Microsoft Active Directory domains

adpentest

Active Directory penetration testing framework with automatic Domain Controller detection

adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

evil-winrm-py

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

safecadence-netrisk

SafeCadence Network Risk — local-first infrastructure + identity policy platform. 45 adapters (40 infra + 5 identity), 22 controls, 16 multi-vendor translators, capability-based RBAC, AI policy intelligence, attack-path graph, KEV+EPSS-prioritized CVEs, cross-system drift detection. MIT, BYO-AI.

pyadrecon-adws

An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

pyadrecon

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.

activedirectoryenum

Enumerate AD through LDAP with a collection of helpfull scripts being bundled

pwnrm

PwnRM is an operator-grade Active Directory post-exploitation platform engineered directly upon the native Microsoft PowerShell Remoting Protocol (MS-PSRP) and WS-Management (MS-WSMV) standards.

django-auth-ldap3

A library for connecting Django's authentication system to an LDAP directory

ntcompress

Pure-Python ESE record compression and ntdll RtlCompressBuffer/RtlDecompressBuffer formats

django-windowsauth

Easy integration and deployment of Django projects into Windows Environments

ad-secretgen

Derive Active Directory password hashes and Kerberos keys from a cleartext password - the inverse of NTDSWolf.

gpp-decrypt

Tool to parse the Group Policy Preferences XML file which extracts the username and decrypts the cpassword attribute.

ldapcherry

Web UI for managing users and groups in multiple directory services.

credwolf

Validate AD credentials over NTLM and Kerberos - passwords, hashes, keys, and tickets

noisehound

Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/Elastic/MDI/WDAC) plus Azure.

iflow-mcp-ruudmens-koppla

A Model-Context-Protocol (MCP) Server for Active Directory

plumhound

Bloodhound Reporting for Blue and Purple Teams

goodhound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.