git404hub

what is adwshound fr?

josupalacios99/adwshound — explained in plain English

Analysis updated 2026-05-18

44PythonAudience · developerComplexity · 4/5Setup · moderate

tl;dr

A security tool that maps Active Directory networks using a quieter protocol than the LDAP method most similar tools rely on.

vibe map

mindmap
  root((repo))
    What it does
      Enumerates Active Directory
      Uses ADWS protocol
      Outputs BloodHound data
    Tech stack
      Python
      Impacket
      ADWS protocol
    Use cases
      Authorized AD assessments
      Map domain trusts
      Analyze permissions and ACLs
    Audience
      Security researchers
      Penetration testers
      Red teamers

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

what do people make with this?

VIBE 1

Enumerate Active Directory objects for a BloodHound-based attack path assessment.

VIBE 2

Collect domain data more quietly by favoring ADWS over LDAP queries.

VIBE 3

Map domain trusts, group memberships, and ACLs during an authorized security engagement.

VIBE 4

Audit certificate authority configuration for common Active Directory certificate service weaknesses.

what's the stack?

PythonImpacketADWSKerberos

how it stacks up fr

josupalacios99/adwshoundajay150313/agentsre-langchaineatwhiteporridge/outlook-k12
Stars444444
LanguagePythonPythonPython
Setup difficultymoderateeasyhard
Complexity4/52/54/5
Audiencedeveloperdeveloperdeveloper

Figures from each repo's GitHub metadata at analysis time.

how do i run it?

Difficulty · moderate time til it works · 30min

Requires Python 3.10+, several networking libraries via pip, and credentials for a target Active Directory domain.

The README included in this source does not state a software license.

in plain english

ADWSHound is a security research tool written in Python for mapping out a Windows Active Directory environment, the system many organizations use to manage user accounts, computers, and permissions on their network. It collects the same kind of information as a well known tool called SharpHound and produces output that can be loaded into BloodHound, a popular tool for visualizing Active Directory relationships and attack paths. What makes ADWSHound different is how it asks the directory for that information. Instead of using LDAP, the traditional and heavily monitored protocol most collection tools rely on, it communicates over ADWS, a lesser watched Microsoft protocol that runs on a different network port. The README states this makes the tool quieter and more likely to avoid security controls that specifically watch for LDAP based enumeration. The tool supports logging in with a password, a technique called pass the hash, or Kerberos authentication, and it includes several settings meant to reduce how noisy or detectable its activity is, such as reusing network connections, obfuscating its search filters, and adding delays between requests. It can collect many categories of information, including group memberships, permissions, organizational unit structure, domain trusts, computer sessions, and certificate authority configuration, and some of these collection methods can pull data purely over ADWS while others still require the more common SMB network protocol on port 445. Using it requires Python 3.10 or newer along with several Python libraries for handling network protocols and authentication, listed in a requirements file that can be installed with pip. It is meant for security professionals conducting authorized assessments of Active Directory environments, and its author has written a separate blog post explaining the underlying protocol and the tradeoffs of using it this way in more detail. The README included in this source does not state a software license.

prompts (copy fr)

prompt 1
Help me install the Python requirements for ADWSHound and run a default collection against a lab domain controller.
prompt 2
Explain the difference between the OPSEC tiers described in ADWSHound's README.
prompt 3
Walk me through the collection methods available with the -c flag and what each one gathers.
prompt 4
How does ADWSHound's use of ADWS differ from a traditional LDAP-based collector like SharpHound?

Frequently asked questions

what is adwshound fr?

A security tool that maps Active Directory networks using a quieter protocol than the LDAP method most similar tools rely on.

What language is adwshound written in?

Mainly Python. The stack also includes Python, Impacket, ADWS.

What license does adwshound use?

The README included in this source does not state a software license.

How hard is adwshound to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is adwshound for?

Mainly developer.

peek the repo → explain another one

This repo across BitVibe Labs

double-check against the repo, no cap.