AYI-NEDJIMI/ad-attack-simulator

AD Attack Simulator - Interactive Kill Chain Visualizer

An interactive visualization tool for understanding 20 critical Active Directory attack techniques with detailed kill chain analysis, MITRE ATT&CK mappings, detection methods, and defense recommendations.

Features

• —20 AD Attack Techniques: Comprehensive coverage of major AD attack vectors including:
• —Golden Ticket
• —DCSync
• —Kerberoasting
• —AS-REP Roasting
• —Pass-the-Hash
• —Pass-the-Ticket
• —Skeleton Key
• —DCShadow
• —Silver Ticket
• —AD CS/Certificates
• —AdminSDHolder
• —ACL Abuse
• —NTLM Relay
• —SIDHistory Injection
• —RBCD Abuse
• —GPO Abuse
• —AD FS/SAML
• —Forest Trust Abuse
• —Password Filter DLL
• —Computer Account Takeover

• —Kill Chain Visualization: Interactive Plotly diagrams showing attack progression through:
• —Reconnaissance
• —Initial Access
• —Execution
• —Persistence
• —Privilege Escalation
• —Lateral Movement
• —Exfiltration

• —Bilingual Support: Full English and French language support for all content

• —MITRE ATT&CK Integration: Mapping of each attack to official MITRE ATT&CK techniques

• —Detection & Defense: Practical detection methods and security recommendations for each attack

• —Tool Information: Lists of both offensive and defensive tools for each technique

Resources

Top 10 Attacks

• —Top 10 Attaques Active Directory

Detailed Attack Guides

• —Golden Ticket - Attaque & Défense
• —DCSync - Attaque & Défense
• —Kerberoasting - Attaque & Défense
• —Pass-the-Hash - Attaque & Défense
• —Pass-the-Ticket - Attaque & Défense
• —Skeleton Key - Attaque & Défense
• —DCShadow - Attaque & Défense
• —Silver Ticket - Attaque & Défense
• —AD CS/Certificats - Attaque & Défense

Security Guides & Tools

• —Cluster Active Directory Hub
• —Livre Blanc - Sécurité Active Directory
• —Guide de Sécurisation Active Directory 2025
• —Top 10 Outils d'Audit Active Directory 2025
• —Top 5 Outils d'Audit Active Directory

How to Use

1. 1.Select your preferred language (English or Français)
2. 2.Choose an attack from the dropdown menu
3. 3.Review the kill chain visualization showing attack phases
4. 4.Study the description and MITRE ATT&CK mapping
5. 5.Learn about detection methods and defense recommendations
6. 6.Explore the tools used for both offense and defense
7. 7.Visit the Resources tab for deep-dive guides and additional learning materials

About the Creator

Created by AYI-NEDJIMI Consultants - Cybersecurity expertise and Active Directory security solutions.

License

Apache License 2.0

Technologies

• —Gradio 4.44.0: Interactive web interface
• —Plotly: Interactive kill chain visualizations
• —Python 3.10: Core application logic