VulnScanners Logo

Active Directory

Impacket

Python toolkit of network-protocol scripts.

adsmb
impacket — terminal
$ secretsdump.py domain/user:pass@10.0.0.5

What it does

Impacket is a collection of Python classes and ready-to-run scripts (psexec.py, secretsdump.py, and more) for working with SMB, Kerberos, and MSRPC. It's foundational to most Active Directory attacks.

Common use cases

  • •Dump domain hashes remotely via secretsdump.py for offline cracking and lateral movement.
  • •Execute commands on remote Windows hosts using psexec.py with valid administrative credentials.
  • •Perform Kerberos attacks including AS-REP roasting, Kerberoasting, and delegation abuse.

Key features

  • •Collection of 30+ ready-to-run scripts for AD and Windows protocol attacks.
  • •Supports SMB, Kerberos, MSRPC, LDAP, and WMI protocol implementations.
  • •Includes psexec, wmiexec, smbexec, and atexec for remote command execution.
  • •Actively maintained with broad compatibility across modern Windows versions.

Source

https://github.com/fortra/impacket ↗

More Active Directory tools

CrackMapExecSwiss-army knife for AD network post-exploitation.GetNPUsers.pyAS-REP roasting via Impacket.enum4linux-ngSMB and Windows enumeration.LDAPDomainDumpDump Active Directory contents via LDAP.

Need hosted scanning instead of local tooling?

Run a scan in the browser →