View ActiveDirectoryEnum on Snyk Open Source Advisor

Package Health Score

42 / 100

security
Security review needed
popularity
Limited
maintenance
Inactive
community
Sustainable

Popularity

Limited

Total Weekly Downloads (234)

GitHub Stars: 137
Forks: 40
Contributors: 6

Direct Usage Popularity

The PyPI package ActiveDirectoryEnum receives a total of 234 downloads a week. As such, we scored ActiveDirectoryEnum popularity level to be Limited.

Based on project statistics from the GitHub repository for the PyPI package ActiveDirectoryEnum, we found that it has been starred 137 times.

The download numbers shown are the average weekly downloads from the last 6 weeks.

Security

Security review needed

Security and license risk for latest version

Release Date: Sep 19, 2020
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
8
H
17
M
3
L
License Risk: 0
H
7
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

MIT

Security Policy

Yes

A security vulnerability was detected in an indirect dependency that is added to your project when the latest version of ActiveDirectoryEnum is installed.

We highly advise you to review these security issues.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Fix it in your project with Snyk!

Maintenance

Inactive

Commit Frequency

Open Issues: 7
Open PR: 15
Last Release: 3 years ago
Last Commit: 10 months ago

Further analysis of the maintenance status of ActiveDirectoryEnum based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for ActiveDirectoryEnum is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Sustainable

Readme: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 6
Funding: No

This project has seen only 10 or less contributors.

We found a way for you to contribute to the project! Looks like ActiveDirectoryEnum is missing a Code of Conduct.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: >=3.4

Age: 3 years
Latest Release: 3 years ago
Dependencies: 21 Direct / 21 Total
Versions: 9
Maintainers: 1
Wheels: OS Independent

Readme

ADE - ActiveDirectoryEnum

 python -m ade
usage: ade [-h] [--dc DC] [-o OUT_FILE] [-u USER] [-s] [-smb] [-kp] [-bh] [-spn] [-sysvol] [--all] [--no-creds] [--dry-run]
           [--exploit EXPLOIT]

        ___        __  _            ____  _                __                   ______                    
       /   | _____/ /_(_)   _____  / __ \(_)_______  _____/ /_____  _______  __/ ____/___  __  ______ ___ 
      / /| |/ ___/ __/ / | / / _ \/ / / / / ___/ _ \/ ___/ __/ __ \/ ___/ / / / __/ / __ \/ / / / __ `__ \
     / ___ / /__/ /_/ /| |/ /  __/ /_/ / / /  /  __/ /__/ /_/ /_/ / /  / /_/ / /___/ / / / /_/ / / / / / /
    /_/  |_\___/\__/_/ |___/\___/_____/_/_/   \___/\___/\__/\____/_/   \__, /_____/_/ /_/\__,_/_/ /_/ /_/ 
                                                                      /____/                             

/*----------------------------------------------------------------------------------------------------------*/

optional arguments:
  -h, --help            show this help message and exit
  --dc DC               Hostname of the Domain Controller
  -o OUT_FILE, --out-file OUT_FILE
                        Path to output file. If no path, CWD is assumed (default: None)
  -u USER, --user USER  Username of the domain user to query with. The username has to be domain name as `user@domain.org`
  -s, --secure          Try to estalish connection through LDAPS
  -smb, --smb           Force enumeration of SMB shares on all computer objects fetched
  -kp, --kerberos_preauth
                        Attempt to gather users that does not require Kerberos preauthentication
  -bh, --bloodhound     Output data in the format expected by BloodHound
  -spn                  Attempt to get all SPNs and perform Kerberoasting
  -sysvol               Search sysvol for GPOs with cpassword and decrypt it
  --all                 Run all checks
  --no-creds            Start without credentials
  --dry-run             Don't execute a test but run as if. Used for testing params etc.
  --exploit EXPLOIT     Show path to PoC exploit code

The new inclusion of imbedded exploits can yield results such as:

...
[ WARN ] DC may be vulnerable to: [ cve-2020-1472 ]
...

To query an exploit do for PoC code:

$ python -m ade --exploit cve-2020-1472
Exploit for: cve-2020-1472 can be found at: https://github.com/dirkjanm/CVE-2020-1472

Install

Run installation through pip3:

pip3 install ActiveDirectoryEnum
python -m ade

If you run BlackArch, ActiveDirectoryEnum is available through pacman as such:

pacman -S activedirectoryenum

Included attacks/vectors

[X] ASREPRoasting
[X] Kerberoasting
[X] Dump AD as BloodHound JSON files
[X] Searching GPOs in SYSVOL for cpassword and decrypting
[X] Run without creds and attempt to gather for further enumeration during the run
[X] Sample exploits included:
CVE-2020-1472

Collaboration

While this project is developed to fit my need, any collaboration is appriciated. Please feel free to fork the project, make changes according to the License agreements and make a Pull Request. I only ask that:

Keep equivilent naming standard as the base project
Keep equivilent syntaxing
Test your code
Error handling is incorporated
Document the feature - both in code but also for potential Wiki page

Thanks & Acknowledgements

Big thanks to the creators of: Impacket @github BloodHound @github BloodHound.py @github CVE-2020-1472 by Tom Tervoort of Secura

Without the above this wrapper was not possible.

License

ActiveDirectoryEnum dependencies

bloodhound cffi click cryptography dnspython flask future impacket itsdangerous jinja2 ldap3 ldapdomaindump markupsafe progressbar pyasn1 pycparser pycryptodomex pyopenssl six termcolor werkzeug

FAQs

What is ActiveDirectoryEnum?

Enumerate Active Directory with standard vectors. Visit Snyk Advisor to see a full health score report for ActiveDirectoryEnum, including popularity, security, maintenance & community analysis.

Is ActiveDirectoryEnum popular?

The python package ActiveDirectoryEnum receives a total of 234 weekly downloads. As such, ActiveDirectoryEnum popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is ActiveDirectoryEnum well maintained?

We found indications that ActiveDirectoryEnum is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is ActiveDirectoryEnum safe to use?

While scanning the latest version of ActiveDirectoryEnum, we found that a security review is needed. A total of 28 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 4 December-2023, at 12:23 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

ActiveDirectoryEnum

Enumerate Active Directory with standard vectors For more information about how to use this package see README

Ensure you're using the healthiest python packages

Package Health Score

Popularity

Total Weekly Downloads (234)

Direct Usage Popularity

Security

Security and license risk for latest version

Maintenance

Commit Frequency

Community

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Package

Readme

ADE - ActiveDirectoryEnum

Install

Included attacks/vectors

Collaboration

Thanks & Acknowledgements

License

ActiveDirectoryEnum dependencies

FAQs

What is ActiveDirectoryEnum?

Is ActiveDirectoryEnum popular?

Is ActiveDirectoryEnum well maintained?

Is ActiveDirectoryEnum safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Total Weekly Downloads (234)

Direct Usage Popularity

Security and license risk for latest version

Commit Frequency

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Readme

ADE - ActiveDirectoryEnum

Install

Included attacks/vectors

Collaboration

Thanks & Acknowledgements

License

ActiveDirectoryEnum dependencies

FAQs

What is ActiveDirectoryEnum?

Is ActiveDirectoryEnum popular?

Is ActiveDirectoryEnum well maintained?

Is ActiveDirectoryEnum safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues