capture0x/AdStrike

AdStrike is an open-source AD red-team framework that plugs AI into every stage of a Windows-environment pentest: it enumerates the domain, maps attack paths, walks Kerberos and ADCS exploit chains, and generates reports — all from a modular pipeline you can extend. The MCP server integration is the part worth pausing on. It means operators can script and automate multi-step attack sequences without manually chaining tools, which compresses the gap between 'found a misconfiguration' and 'demonstrated full blast radius in the report'. Most AD tooling is either old-school PowerShell runners or bloated commercial platforms. AdStrike sits in the middle: scriptable, AI-assisted, and self-hosted. The honest reservation is that the AI layer is only as good as your prompt hygiene and the model you drop in — expect to tune it. Also, read the authorized-use requirement literally; this is not a learning sandbox. -> Best for: AI engineer or technical PM doing in-house red-team work on Windows AD environments