ADXPL-Forge (AXF)
Active Directory Attack and Audit Framework

ADXPL-Forge is the Active Directory offensive security component of the XPL-Suite. It provides 219 modules across 25 categories for AD enumeration, exploitation, lateral movement, privilege escalation and post-exploitation.

Kerberoasting, AS-REP Roasting, delegation abuse, DCSync, NTLM relay, password spray, enumeration, BloodHound integration, ADCS abuse, GPO abuse, trust attacks, SID history, golden/silver/diamond ticket, skeleton key, shadow credentials, LAPS abuse, RBCD, constrained/unconstrained delegation, S4U, DPAPI, SCCM, CVE exploits, LOLBins, evasion, BYOVD, emulation.

• Python >= 3.12
• xpl-core >= 0.3.0
• xpl-intel >= 2.0.0

pip install adxpl

Or from source:

git clone https://github.com/mrhenrike/ADXPL-Forge.git
cd ADXPL-Forge
pip install -e ".[dev]"

adxpl --help
adxpl enumerate -t 10.0.0.1
adxpl kerberoast -t 10.0.0.1 -u user -p pass

pytest tests/ -q

adxpl/
├── core/           # Base classes, interpreter, options
├── modules/        # 219 exploit/audit modules (25 categories)
├── resources/      # Wordlists, templates, data files
└── tests/          # Unit and integration tests

See LICENSE for details.

Andre Henrique de Oliveira (@mrhenrike) | Uniao Geek

Part of the XPL-Suite ecosystem.