Top 5 Active Directory Pentesting Tools

http://www.tcm.rocks/live-y - Hacking & Defending Active Directory Live is one of the several live trainings the TCM Security team offers. Head over to our website for the complete list of available and upcoming sessions, including SOC Level 1, OSINT, and more. What are the top 5 Active Directory tools - according to our team? While this list is certainly up for debate, here's a quick breakdown of a handful that we find really useful. Starting with: - PingCastle - https://www.pingcastle.com/ (scanning tool to identify vulnerabilities) - ldapdomaindump - https://github.com/dirkjanm/ldapdomaindump (extracts and dumps data) - Bloodhound - https://bloodhound.specterops.io/get-started/introduction (maps out and analyzes relationships in an environment - use for privesc and lateral movement) - Plumhound - https://github.com/PlumHound/PlumHound (organizes, scores, and prioritizes attach paths) - Hashcat - https://github.com/hashcat/hashcat (cracks hashed credentials and access user accounts or systems) What would you add? Share your picks in the comments! #activedirectory #cybersecurity #pentesting #ethicalhacking Sponsor a Video: https://www.tcm.rocks/Sponsors Pentests & Security Consulting: https://tcm-sec.com Get Trained: https://www.tcm.rocks/acad-y Get Certified: http://www.tcm.rocks/certs-y Merch: https://www.bonfire.com/store/tcm-security/ 📱Social Media📱 ___________________________________________ X: https://x.com/TCMSecurity Twitch: https://www.twitch.tv/thecybermentor Instagram: https://www.instagram.com/tcmsecurity/ LinkedIn: https://www.linkedin.com/company/tcm-security-inc/ TikTok: https://www.tiktok.com/@tcmsecurity Discord: https://discord.gg/tcm Facebook: https://www.facebook.com/tcmsecure