A curated collection of Active Directory security tools with one-line installation.
sudo curl -LsSf https://github.com/boboaung1337/adtools/raw/refs/heads/main/sublime.sh | bashsudo wget -O /usr/share/fonts/truetype/noto/NotoSerifMyanmar-Regular.ttf https://github.com/boboaung1337/again/raw/refs/heads/main/NotoSerifMyanmar-Regular.ttf && sudo fc-cache -fvcurl -LsSf https://github.com/boboaung1337/adtools/raw/refs/heads/main/install_burp.sh | bashcurl -LsSf https://github.com/boboaung1337/adtools/raw/refs/heads/main/install-pip2.sh | bashsudo UV_INSTALL_DIR="/usr/local/bin" sh -c 'curl -LsSf https://astral.sh/uv/install.sh | sh'curl -sSL https://github.com/boboaung1337/adtools/raw/refs/heads/main/install_bloodhound.sh | bashcurl -sSL https://github.com/boboaung1337/adtools/raw/refs/heads/main/sliver-install | bash && rm -f sliver-installcurl -sSL https://raw.githubusercontent.com/boboaung1337/adtools/main/install.sh | bashwget https://github.com/boboaung1337/adtools/raw/refs/heads/main/PassTheCert.exewget https://github.com/boboaung1337/adtools/raw/refs/heads/main/PetitPotam.exe| Tool | Original Author | Purpose |
|---|---|---|
| PetitPotam | topotam | Coerce Windows authentication via MS-EFSRPC |
| PassTheCert | AlmondOffSec | LDAP/S authentication with certificates |
| PKINITtools | dirkjanm | Kerberos PKINIT attacks (gettgtpkinit, getnthash, gets4uticket) |
| ntlm_theft | Greenwolf | A tool for generating multiple types of NTLMv2 hash theft files |
All tools are the original work of:
- topotam - PetitPotam
- AlmondOffSec - PassTheCert
- dirkjanm - PKINITtools
- Greenwolf - ntlm_theft