rbcd

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

Linux-native Kerberos delegation abuse framework for Active Directory. Enumerates and exploits RBCD, constrained, and unconstrained delegation paths with OPSEC noise profiling and Elastic SIEM telemetry validation.

Full Active Directory compromise of Support.htb through SMB enumeration, binary reverse engineering, LDAP credential harvesting, and Resource-Based Constrained Delegation abuse

Active Directory Kerberos Delegation Audit Tool - 100% Defensive Security

Full walkthrough of HackTheBox Pirate (Hard, Windows). A pure Active Directory chain from a pre-Windows-2000 machine account to Domain Admin, no CVEs, finishing with a constrained-delegation SPN injection.