Volver al ranking

netwrix/pingcastle

C#pingcastle.com

PingCastle - Get Active Directory Security at 80% in 20% of the time

active-directoryping-castlepingcastlesecuritymimikatzcisoreporting-toolstignistdodhipaasox
Crecimiento de estrellas
Estrellas
2.9k
Forks
351
Crecimiento semanal
Issues
55
1k2k
sept 2018abr 2021dic 2023jul 2026
README

PingCastle by Netwrix

Stay Connected & Contribute

We welcome all PingCastle users: open source contributors, IT admins, and security professionals, to get involved and help shape the future of PingCastle.

  • Join the Netwrix Community: community.netwrix.com   Get announcements, view the roadmap, submit feature ideas, and connect with other users.
  • Contribute on GitHub github.com/netwrix/pingcastle Submit pull requests, review open issues, or explore the codebase. 

Introduction

The threat landscape for Active Directory security continues to evolve at a rapid pace. Well-known tools like mimikatz and resources such as adsecurity.org have exposed and popularized numerous vulnerabilities that organizations must address.

PingCastle provides a streamlined approach to evaluating Active Directory security using a comprehensive risk assessment methodology and maturity framework. Rather than pursuing exhaustive evaluation at the expense of efficiency, PingCastle delivers the optimal balance—identifying 80% of critical security issues while requiring just 20% of the time and effort of traditional assessment methods.

*****    #******** Netwrix PingCastle (Version 3.5.0.33)
 ***    %********** Get Active Directory Security at 80% in 20% of the time
 *      ####   #### End of support: 2027-08-31.
     ***#### ####
   *********   #### To find out more about PingCastle, visit <https://www.pingcastle.com>
 ####******%    ##  For online documentation, visit <https://helpcenter.netwrix.com/category/pingcastle>
####               For support and questions:
 ***********     ** -   Open-source community, visit <https://github.com/netwrix/pingcastle/issues>
 ***********   %*** -   Customers, visit <https://www.netwrix.com/support.html>
What do you want to do?
=======================
Using interactive mode.
Do not forget that there are other command line switches like --help that you can use
  1-healthcheck-Score the risk of a domain
  2-entraid    -Score the risk of Entra ID
  3-conso      -Aggregate multiple reports into a single one
  4-carto      -Build a map of all interconnected domains
  5-scanner    -Perform specific security checks on workstations
  6-export     -Export users or computers
  7-advanced   -Open the advanced menu
  0-Exit
==============================
This is the main functionality of PingCastle. In a matter of minutes, it produces a report which will give you an overview of your Active Directory security. This report can be generated on other domains by using the existing trust links.

Check https://www.pingcastle.com for the documentation and methodology

Build

PingCastle is a C# project which can be built from Visual Studio 2012 to Visual Studio 2022.

Features & Bugs

For reporting bugs or requesting features in the open source edition of PingCastle, we recommend using the Netwrix Community. Alternatively, you can submit an issue on GitHub.

Customers of a commercially available edition should contact Netwrix technical support.

Additionally, both open source users and customers can visit the Netwrix Community to ask questions, suggest improvements, and stay updated on the latest developments.

License

PingCastle is available under two licensing options:

  1. Open Source Edition: Licensed under the Non-Profit Open Software License ("Non-Profit OSL") 3.0.

    • Organizations may use PingCastle internally without purchasing a license, even in for-profit companies.
    • This includes usage by a company's own IT staff or their contracted IT service providers.
    • You cannot monetize PingCastle or offer it as a paid service to others under this license.
  2. Commercial License: Available for purchase.

    • Required for anyone who wants to incorporate PingCastle into commercial services or products.
    • Necessary if you plan to generate revenue by providing PingCastle-based services to other organizations.

In summary: Use it freely for internal purposes; purchase a license if you plan to make money from it.

PingCastle uses the following open source components:

Author

Repositorios relacionados
byt3bl33d3r/CrackMapExec

A swiss army knife for pentesting networks

PythonPyPIBSD 2-Clause "Simplified" Licensepythonactive-directory
9.2k1.7k
Orange-Cyberdefense/GOAD

game of active directory

PowerShellGNU General Public License v3.0active-directoryinfrastructure-as-code
8.1k1.1k
S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

MIT Licenseactivedirectoryactive-directory
6.7k1.3k
Pennyw0rth/NetExec

The Network Execution Tool

PythonPyPIBSD 2-Clause "Simplified" Licensehackingpentest
netexec.wiki
5.7k731
JPCERTCC/LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

PythonPyPIOthersecuritydfir
3.2k488
lazywinadmin/PowerShell

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

PowerShellMIT Licensepowershellscripting
lazywinadmin.com
2.9k745
Integration-IT/Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

PowerShellMIT Licenseactive-directoryactive-directory-cheatsheet
2.8k518
safebuffer/vulnerable-AD

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

PowerShellMIT Licenseactive-directorypowershell
2.3k447
AutomatedLab/AutomatedLab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

PowerShellMIT Licensepowershelldeployment
2.2k387
lefayjey/linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

ShellMIT Licensepenetration-testingpentesting
2.2k303
lkarlslund/Adalanche

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

GoGo ModulesGNU Affero General Public License v3.0blueteamactive-directory
netsection.com
2.2k204
MichaelGrafnetter/DSInternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

C#MIT Licensesecurity-auditpenetration-testing
dsinternals.com
2k277