๐ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ฒ ๐๐ถ๐๐
๐ช๐ต๐ ๐๐ต๐ผ๐๐น๐ฑ ๐ ๐๐๐ฒ ๐๐๐ฃ๐ฟ๐ผ๐ฏ๐ฒ? ๐๐ผ๐ ๐ถ๐ ๐ถ๐ ๐ฑ๐ถ๐ณ๐ณ๐ฒ๐ฟ๐ฒ๐ป๐?
That is something people ask me quite often. So let me explain why I createdย ADProbeย in the first place.
โก๏ธ ADProbe started during my ๐๐ฐ๐๐ถ๐๐ฒ ๐๐ถ๐ฟ๐ฒ๐ฐ๐๐ผ๐ฟ๐ ๐๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ๐ฎ๐๐๐ฒ๐๐๐บ๐ฒ๐ป๐๐. At the beginning, it was not really a โtoolโ. It was just me using PowerShell to check a few things faster.
Then I kept ๐ฎ๐ฑ๐ฑ๐ถ๐ป๐ด ๐บ๐ผ๐ฟ๐ฒ ๐ฐ๐ต๐ฒ๐ฐ๐ธ๐. More environments. More assessments. More repeated findings. More things I wanted to verify quickly and consistently.
๐๐ ๐๐ผ๐บ๐ฒ ๐ฝ๐ผ๐ถ๐ป๐, ๐ ๐ต๐ฎ๐ฑ ๐๐ผ ๐ฑ๐ฒ๐ฐ๐ถ๐ฑ๐ฒ:
Should I use an existing third-party AD assessment tool, or should I keep building my own? I tried ๐บ๐๐น๐๐ถ๐ฝ๐น๐ฒ ๐ฒ๐ ๐ถ๐๐๐ถ๐ป๐ด ๐๐ผ๐ผ๐น๐. And donโt get me wrong – many of them are really good. But I had two problems.
1๏ธโฃ ๐ง๐ผ๐ผ ๐บ๐๐ฐ๐ต ๐ป๐ผ๐ถ๐๐ฒ
Some tools produced a lot of findings, but many of them were not really useful for the type of AD security assessment I was doing. I donโt want hundreds of findings just to make the report look bigger. I want findings I can explain, defend, and connect to real risk.
2๏ธโฃ ๐ง๐ฟ๐๐๐ ๐ฎ๐ป๐ฑ ๐๐ฟ๐ฎ๐ป๐๐ฝ๐ฎ๐ฟ๐ฒ๐ป๐ฐ๐
In customer environments, I try to avoid running third-party compiled tools whenever possible. Not because they are automatically bad. But because I prefer to know exactly what I am running, what it queries, and what it does.
โ ๐ง๐ต๐ฎ๐ ๐ถ๐ ๐ต๐ผ๐ ๐๐๐ฃ๐ฟ๐ผ๐ฏ๐ฒ ๐๐๐ฎ๐ฟ๐๐ฒ๐ฑ.
A simple PowerShell-based tool for checking Active Directory vulnerabilities, misconfigurations, and persistence methods attackers may leave behind.
๐๐ฟ๐ผ๐บ ๐บ๐ ๐ฝ๐ผ๐ถ๐ป๐ ๐ผ๐ณ ๐๐ถ๐ฒ๐, ๐๐ต๐ฒ ๐บ๐ฎ๐ถ๐ป ๐ฏ๐ฒ๐ป๐ฒ๐ณ๐ถ๐๐ ๐ฎ๐ฟ๐ฒ:
๐น less noise
๐น focused on real AD security assessment needs
๐น one simple PowerShell script (one file only)
๐น transparent checks you can review
๐น easy to extract only the queries you need
And I think the โsimple PowerShell scriptโ part is ๐ถ๐บ๐ฝ๐ผ๐ฟ๐๐ฎ๐ป๐. You do not need to blindly trust it. You can open it. Read it. Verify it.
โก๏ธ ๐๐ ๐๐ฟ๐ฎ๐ฐ๐ only the AD queries you want.
Right now, ADProbe containsย ๐ฑ๐ญ ๐ฐ๐ต๐ฒ๐ฐ๐ธ๐ย for Active Directory vulnerabilities, misconfigurations, and persistence methods. It is free, transparent and built specifically for needs of AD security assessments.
๐ https://horizon-secured.com/tools/
๐ฃ๐น๐ฒ๐ฎ๐๐ฒ, let me know what you think about it.
