A curated list of awesome Active Directory Penetration Testing and attack resources

A variant of davidprowe/BadBlood that fills an Active Directory lab with realistic objects using rockyou-derived weak passwords (for AD attack practice in a lab).

Active Directory security assessment lab — deployed BadBlood on Azure, attacked with Kerberoasting and AS-REP Roasting from Kali, remediated all findings, and documented before/after PingCastle scoring. Full MITRE ATT&CK mapping.