I'm not sure who put this site together, but this PingCastle cheat sheet is awesome. If you're a PingCastle fan, definitely something to check out... https://pentesting.site/cheat-sheets/pingcastle-cheat-sheet/
If anyone knows who this site belongs to, let me know so I can give a proper shout out!
If anyone knows who this site belongs to, let me know so I can give a proper shout out!
Pentesting.Site | PingCastle Cheat Sheet
The ultimate PingCastle cheat sheet. Master PingCastle commands for effective Active Directory pentesting and security assessments.
pentesting.site
January 20, 2025 at 5:31 PM
I'm not sure who put this site together, but this PingCastle cheat sheet is awesome. If you're a PingCastle fan, definitely something to check out... https://pentesting.site/cheat-sheets/pingcastle-cheat-sheet/
If anyone knows who this site belongs to, let me know so I can give a proper shout out!
If anyone knows who this site belongs to, let me know so I can give a proper shout out!
How do you meaningfully improve the security of your AD environment?
Run these free tools quarterly:
- PingCastle
- ScriptSentry
- Locksmith
- ADeleginator
Run these free tools quarterly:
- PingCastle
- ScriptSentry
- Locksmith
- ADeleginator
April 21, 2025 at 6:40 PM
How do you meaningfully improve the security of your AD environment?
Run these free tools quarterly:
- PingCastle
- ScriptSentry
- Locksmith
- ADeleginator
Run these free tools quarterly:
- PingCastle
- ScriptSentry
- Locksmith
- ADeleginator
🧵 top 3 favorite security tools for sysadmins..
PingCastle: an Active Directory health assessment tool (https://pingcastle.com)
PingCastle is awesome for a number of reasons but the main things I really like is how detailed the health check report is and the references it includes in the report.
PingCastle: an Active Directory health assessment tool (https://pingcastle.com)
PingCastle is awesome for a number of reasons but the main things I really like is how detailed the health check report is and the references it includes in the report.
December 5, 2024 at 2:34 PM
🧵 top 3 favorite security tools for sysadmins..
PingCastle: an Active Directory health assessment tool (https://pingcastle.com)
PingCastle is awesome for a number of reasons but the main things I really like is how detailed the health check report is and the references it includes in the report.
PingCastle: an Active Directory health assessment tool (https://pingcastle.com)
PingCastle is awesome for a number of reasons but the main things I really like is how detailed the health check report is and the references it includes in the report.
How to make pentesters cry...
Run PingCastle/PurpleKnight, Locksmith, and ScriptSentry in your environment and fix all the critical issues before your next pentest.
I promise you...they will be weep
Run PingCastle/PurpleKnight, Locksmith, and ScriptSentry in your environment and fix all the critical issues before your next pentest.
I promise you...they will be weep
December 6, 2024 at 3:16 PM
How to make pentesters cry...
Run PingCastle/PurpleKnight, Locksmith, and ScriptSentry in your environment and fix all the critical issues before your next pentest.
I promise you...they will be weep
Run PingCastle/PurpleKnight, Locksmith, and ScriptSentry in your environment and fix all the critical issues before your next pentest.
I promise you...they will be weep
My best suggestion is :
🏰 Your privacy/safety is in another PingCastle
🏰 Your privacy/safety is in another PingCastle
November 26, 2024 at 5:51 PM
My best suggestion is :
🏰 Your privacy/safety is in another PingCastle
🏰 Your privacy/safety is in another PingCastle
The Antivirus scanning mode built into PingCastle is a hidden gem, here’s why
Under the covers it uses LsaOpenPolicy() and LsaLookupNames() to identify service names that may belong to AV/EDR products.
It works remotely and quickly.
Actually lots of interesting info can be obtained this way..
Under the covers it uses LsaOpenPolicy() and LsaLookupNames() to identify service names that may belong to AV/EDR products.
It works remotely and quickly.
Actually lots of interesting info can be obtained this way..
January 15, 2025 at 5:43 PM
The Antivirus scanning mode built into PingCastle is a hidden gem, here’s why
Under the covers it uses LsaOpenPolicy() and LsaLookupNames() to identify service names that may belong to AV/EDR products.
It works remotely and quickly.
Actually lots of interesting info can be obtained this way..
Under the covers it uses LsaOpenPolicy() and LsaLookupNames() to identify service names that may belong to AV/EDR products.
It works remotely and quickly.
Actually lots of interesting info can be obtained this way..
Most breaches walk straight through misconfigured Active Directory.
7 free tools that find the holes first: PingCastle (start here), BloodHound CE, Purple Knight, Certipy, Snaffler, and ADeleg.
Your own domain, with authorisation.
https://app.stationx.net/book
7 free tools that find the holes first: PingCastle (start here), BloodHound CE, Purple Knight, Certipy, Snaffler, and ADeleg.
Your own domain, with authorisation.
https://app.stationx.net/book
September 23, 2026 at 12:01 PM
Most breaches walk straight through misconfigured Active Directory.
7 free tools that find the holes first: PingCastle (start here), BloodHound CE, Purple Knight, Certipy, Snaffler, and ADeleg.
Your own domain, with authorisation.
https://app.stationx.net/book
7 free tools that find the holes first: PingCastle (start here), BloodHound CE, Purple Knight, Certipy, Snaffler, and ADeleg.
Your own domain, with authorisation.
https://app.stationx.net/book
I strongly recommend running Maester periodically to secure your Microsoft 365 tenant, in addition to running PingCastle in your On-Prem AD environment.
[1] maester.dev
[1] maester.dev
Maester
Your Microsoft Security test automation framework!
maester.dev
October 23, 2025 at 6:14 AM
I strongly recommend running Maester periodically to secure your Microsoft 365 tenant, in addition to running PingCastle in your On-Prem AD environment.
[1] maester.dev
[1] maester.dev
Got the PingCastle part right! 🙌
November 26, 2024 at 6:14 PM
Got the PingCastle part right! 🙌
💡 Auditer soi-même son annuaire Active Directory en quelques minutes, c'est possible grâce à deux outils gratuits :
✅ PingCastle : www.it-connect.fr/comment-audi...
✅ Purple Knight : www.it-connect.fr/comment-audi...
#audit #activedirectory #sysadmin #infosec #microsoft #pingcastle #purpleknight
✅ PingCastle : www.it-connect.fr/comment-audi...
✅ Purple Knight : www.it-connect.fr/comment-audi...
#audit #activedirectory #sysadmin #infosec #microsoft #pingcastle #purpleknight
PingCastle, un outil pour auditer son Active Directory
Comment auditer un annuaire Active Directory ? Comment améliorer la sécurité d'un AD ? PingCastle est un outil abouti et qui apporte une réponse pertinente.
www.it-connect.fr
June 27, 2025 at 1:45 PM
💡 Auditer soi-même son annuaire Active Directory en quelques minutes, c'est possible grâce à deux outils gratuits :
✅ PingCastle : www.it-connect.fr/comment-audi...
✅ Purple Knight : www.it-connect.fr/comment-audi...
#audit #activedirectory #sysadmin #infosec #microsoft #pingcastle #purpleknight
✅ PingCastle : www.it-connect.fr/comment-audi...
✅ Purple Knight : www.it-connect.fr/comment-audi...
#audit #activedirectory #sysadmin #infosec #microsoft #pingcastle #purpleknight
Check and harden your Active Directory with #PingCastle! This powerful tool identifies vulnerabilities, spots misconfigurations, and helps you ensure your Active Directory remains robust and secure.
www.pingcastle.com/download/
#infosec #blueteam #pentest
www.pingcastle.com/download/
#infosec #blueteam #pentest
Download - PingCastle
Download PingCastle binaries and source code to audit your Active Directory or get the map of your domains.
www.pingcastle.com
May 29, 2024 at 6:30 AM
Check and harden your Active Directory with #PingCastle! This powerful tool identifies vulnerabilities, spots misconfigurations, and helps you ensure your Active Directory remains robust and secure.
www.pingcastle.com/download/
#infosec #blueteam #pentest
www.pingcastle.com/download/
#infosec #blueteam #pentest
I love sending the Windows admins Pingcastle and Purple Knight reports to freak them out a little.
January 29, 2025 at 3:47 PM
I love sending the Windows admins Pingcastle and Purple Knight reports to freak them out a little.
Totally. Which is why I’m such a big fan of the fabulous four, PingCastle scriptsentry locksmith and adeleginator
December 10, 2024 at 3:36 PM
Totally. Which is why I’m such a big fan of the fabulous four, PingCastle scriptsentry locksmith and adeleginator
Pingcastle (as you know) is such a great start.
Working with an org right now, getting them down from 100 to < 20.
Working with an org right now, getting them down from 100 to < 20.
April 11, 2025 at 3:51 PM
Pingcastle (as you know) is such a great start.
Working with an org right now, getting them down from 100 to < 20.
Working with an org right now, getting them down from 100 to < 20.
1/ PingCastle now highlights when no policy is in place to prevent scripting files (such as .js) from being executed via double-click.
September 21, 2025 at 11:06 AM
1/ PingCastle now highlights when no policy is in place to prevent scripting files (such as .js) from being executed via double-click.
I ran pingcastle and sent the results to the systems manager at my old job before I left just to give him something to remember me by 😆
December 6, 2024 at 3:19 PM
I ran pingcastle and sent the results to the systems manager at my old job before I left just to give him something to remember me by 😆
J'ai fais de l'hardening AD pendant 2ans dans mon ancienne boite. Dans celle où je bosse, je vois plein de petits trucs pouvant se faire rapidement après un coup de Pingcastle et PurpleKnight. Réponse: "Non on va payer un audit pour ça"
On vient de recevoir le mail, devinez quels tools il utilise
On vient de recevoir le mail, devinez quels tools il utilise
October 28, 2024 at 9:58 AM
J'ai fais de l'hardening AD pendant 2ans dans mon ancienne boite. Dans celle où je bosse, je vois plein de petits trucs pouvant se faire rapidement après un coup de Pingcastle et PurpleKnight. Réponse: "Non on va payer un audit pour ça"
On vient de recevoir le mail, devinez quels tools il utilise
On vient de recevoir le mail, devinez quels tools il utilise
New blog post: Tear Down The Castle - Part 2
dfir.ch/posts/tear_d...
I analyzed 250 PingCastle Reports, grouping the findings along the categories I used for my 10 AD Commandments series.
dfir.ch/posts/tear_d...
I analyzed 250 PingCastle Reports, grouping the findings along the categories I used for my 10 AD Commandments series.
January 30, 2025 at 4:00 PM
New blog post: Tear Down The Castle - Part 2
dfir.ch/posts/tear_d...
I analyzed 250 PingCastle Reports, grouping the findings along the categories I used for my 10 AD Commandments series.
dfir.ch/posts/tear_d...
I analyzed 250 PingCastle Reports, grouping the findings along the categories I used for my 10 AD Commandments series.
SMB Auditing Made Easy: Ditch PingCastle and Use This PowerShell Script for Dialect and Signing Reports + Video
Introduction: Server Message Block (SMB) is the backbone of file sharing in Windows networks, but its legacy dialects and misconfigured signing requirements create massive security blind…
Introduction: Server Message Block (SMB) is the backbone of file sharing in Windows networks, but its legacy dialects and misconfigured signing requirements create massive security blind…
SMB Auditing Made Easy: Ditch PingCastle and Use This PowerShell Script for Dialect and Signing Reports + Video
Introduction: Server Message Block (SMB) is the backbone of file sharing in Windows networks, but its legacy dialects and misconfigured signing requirements create massive security blind spots. Security teams often rely on heavy tools like PingCastle to audit these settings, but running them across every domain in a large forest is inefficient and noisy. A new lightweight PowerShell script offers a streamlined way to extract SMB dialect and signing data directly, enabling faster reporting without the bloat.
undercodetesting.com
March 13, 2026 at 10:28 AM
SMB Auditing Made Easy: Ditch PingCastle and Use This PowerShell Script for Dialect and Signing Reports + Video
Introduction: Server Message Block (SMB) is the backbone of file sharing in Windows networks, but its legacy dialects and misconfigured signing requirements create massive security blind…
Introduction: Server Message Block (SMB) is the backbone of file sharing in Windows networks, but its legacy dialects and misconfigured signing requirements create massive security blind…
💡 Auditer soi-même son annuaire Active Directory en quelques minutes, c'est possible grâce à deux outils gratuits
✅ Découvrir 𝗣𝗶𝗻𝗴𝗖𝗮𝘀𝘁𝗹𝗲 : www.it-connect.fr/comment-audi...
✅ Découvrir 𝗣𝘂𝗿𝗽𝗹𝗲 𝗞𝗻𝗶𝗴𝗵𝘁 : www.it-connect.fr/comment-audi...
#audit #activedirectory #sysadmin #microsoft #tools #tuto #it
✅ Découvrir 𝗣𝗶𝗻𝗴𝗖𝗮𝘀𝘁𝗹𝗲 : www.it-connect.fr/comment-audi...
✅ Découvrir 𝗣𝘂𝗿𝗽𝗹𝗲 𝗞𝗻𝗶𝗴𝗵𝘁 : www.it-connect.fr/comment-audi...
#audit #activedirectory #sysadmin #microsoft #tools #tuto #it
May 7, 2025 at 11:10 AM
💡 Auditer soi-même son annuaire Active Directory en quelques minutes, c'est possible grâce à deux outils gratuits
✅ Découvrir 𝗣𝗶𝗻𝗴𝗖𝗮𝘀𝘁𝗹𝗲 : www.it-connect.fr/comment-audi...
✅ Découvrir 𝗣𝘂𝗿𝗽𝗹𝗲 𝗞𝗻𝗶𝗴𝗵𝘁 : www.it-connect.fr/comment-audi...
#audit #activedirectory #sysadmin #microsoft #tools #tuto #it
✅ Découvrir 𝗣𝗶𝗻𝗴𝗖𝗮𝘀𝘁𝗹𝗲 : www.it-connect.fr/comment-audi...
✅ Découvrir 𝗣𝘂𝗿𝗽𝗹𝗲 𝗞𝗻𝗶𝗴𝗵𝘁 : www.it-connect.fr/comment-audi...
#audit #activedirectory #sysadmin #microsoft #tools #tuto #it
We are going live tonight at 7 PM EDT.
Tonight's session is about customizing your toolset to avoid detection: A case study using PingCastle. How can we adapt the red team toolset to avoid detection?
truecyber.world
#redteam
Tonight's session is about customizing your toolset to avoid detection: A case study using PingCastle. How can we adapt the red team toolset to avoid detection?
truecyber.world
#redteam
TrueCyber
TrueCyber
truecyber.world
February 12, 2025 at 2:00 PM
We are going live tonight at 7 PM EDT.
Tonight's session is about customizing your toolset to avoid detection: A case study using PingCastle. How can we adapt the red team toolset to avoid detection?
truecyber.world
#redteam
Tonight's session is about customizing your toolset to avoid detection: A case study using PingCastle. How can we adapt the red team toolset to avoid detection?
truecyber.world
#redteam
I'd like to learn more about "unfucking" the AD and ADCS I inherited. Some things shown in PingCastle don't make sense to me, and neither do the docs the findings point me at.
January 16, 2024 at 2:56 PM
I'd like to learn more about "unfucking" the AD and ADCS I inherited. Some things shown in PingCastle don't make sense to me, and neither do the docs the findings point me at.
New blog post: Tear Down The Castle - Part 1
dfir.ch/posts/tear_d...
I analyzed 250 PingCastle Reports, grouping the findings along the categories I used for my 10 AD Commandments series.
The number of affected domains is stated within each finding.
dfir.ch/posts/tear_d...
I analyzed 250 PingCastle Reports, grouping the findings along the categories I used for my 10 AD Commandments series.
The number of affected domains is stated within each finding.
January 20, 2025 at 7:23 AM
New blog post: Tear Down The Castle - Part 1
dfir.ch/posts/tear_d...
I analyzed 250 PingCastle Reports, grouping the findings along the categories I used for my 10 AD Commandments series.
The number of affected domains is stated within each finding.
dfir.ch/posts/tear_d...
I analyzed 250 PingCastle Reports, grouping the findings along the categories I used for my 10 AD Commandments series.
The number of affected domains is stated within each finding.
Un nouveau venu aux côtés de PingCastle et PurpleKnight pour évaluer la sécurité de l’AD, multiplateforme écrit en Python >
« ADcheck: Assess the security of your Active Directory with few or all privileges. »
« ADcheck: Assess the security of your Active Directory with few or all privileges. »
GitHub - CobblePot59/ADcheck: Assess the security of your Active Directory with few or all privileges.
Assess the security of your Active Directory with few or all privileges. - CobblePot59/ADcheck
github.com
March 31, 2025 at 9:18 AM
Un nouveau venu aux côtés de PingCastle et PurpleKnight pour évaluer la sécurité de l’AD, multiplateforme écrit en Python >
« ADcheck: Assess the security of your Active Directory with few or all privileges. »
« ADcheck: Assess the security of your Active Directory with few or all privileges. »
Since there are so many newcomers, let's start with introductions with 4 images of my commonly used security tools.
November 17, 2024 at 3:13 PM
Since there are so many newcomers, let's start with introductions with 4 images of my commonly used security tools.