Active Directory Python Packages

httpx-auth

Authentication classes to be used with httpx

requests-auth

Authentication classes to be used with requests

dsinternals

A Python native library containing necessary classes, functions and structures to interact with Windows Active Directory.

ms-active-directory

A library for integrating with Microsoft Active Directory domains

safecadence-netrisk

SafeCadence Network Risk — local-first infrastructure + identity policy platform. 45 adapters (40 infra + 5 identity), 22 controls, 16 multi-vendor translators, capability-based RBAC, AI policy intelligence, attack-path graph, KEV+EPSS-prioritized CVEs, cross-system drift detection. MIT, BYO-AI.

adscan

Free Active Directory pentesting tool and Linux CLI for AD enumeration, BloodHound, Kerberoasting, ADCS, DCSync, and attack paths.

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

pyadrecon-adws

An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.

pyadrecon

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.

evil-winrm-py

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

activedirectoryenum

Enumerate AD through LDAP with a collection of helpfull scripts being bundled

django-auth-ldap3

A library for connecting Django's authentication system to an LDAP directory

gpp-decrypt

Tool to parse the Group Policy Preferences XML file which extracts the username and decrypts the cpassword attribute.

django-windowsauth

Easy integration and deployment of Django projects into Windows Environments.

crack-o-matic

Find and notify users in your Active Directory with weak passwords

uciwebauth

Access UCI WebAuth, LDAP person records, and Active Directory user objects.

ldapcherry

Web UI for managing users and groups in multiple directory services.

plumhound

Bloodhound Reporting for Blue and Purple Teams

goodhound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

client-of-redundant-servers

Client of redundant servers

tattletale

Post-exploitation NTDS dump analyzer — correlates secretsdump output with hashcat potfiles to identify shared passwords and weak credentials in Active Directory

koppla

A Model-Context-Protocol (MCP) Server for Active Directory

ntds-tattletale

Analyze secretsdump output and hashcat potfiles to find shared passwords and weak credentials in Active Directory

credwolf

Validate AD credentials over NTLM and Kerberos - passwords, hashes, keys, and tickets