byt3bl33d3r

CrackMapExec: Pentest Windows and Active Directory Networks

CrackMapExec is a Python network-pentesting tool for assessing Windows and Active Directory environments. It is archived and no longer maintained, so it is best considered for authorized testing where its age and support status are acceptable.

ArchivedPythonBSD-2-ClauseSecurityNetworkingSecurity Tools
View on GitHub Compare
Stars
9.2k
Forks
1.7k
Last commit
2.9 years ago
Contributors
81
Releases, 12 months
0

Our take

Archivedarchived by its owners on GitHub, read-only

Health score

35/100

How it is scored
Activity
20
Community
77
Issues
21
Pull requests
21

CrackMapExec addresses a focused Windows and Active Directory pentesting need, but its archived status makes it a legacy choice rather than a supported tool for new deployments.

Good fit if

  • You conduct authorized network or Active Directory assessments and have a specific reason to use this project.
  • You already maintain workflows built around CrackMapExec and can assess the risks of using archived software.
  • You can review and operate the Python-based project in a controlled environment.

Look elsewhere if

  • You need an actively maintained tool or ongoing release and issue handling.
  • You need a project whose maintainers currently provide support.
  • You are choosing a foundation for new long-term security tooling.
All health signals
Last commit2023-12-06 (2.9 years ago)
Commits, last 90 days0
Releases, last 12 months0 (latest v5.4.0, 2022-11-14)
Contributors81 (top contributor: 39% of commits)
Issues closed, last 90 days0
Pull requests merged, last 90 days0
Project age11 years

Checked on 2026-11-07 with the GitHub API.

Project history

Daily GitHub snapshots since Nov 8, 2026. History covers stars and forks; health signals are not tracked historically.

Selected snapshot

Stars

9,170

Forks

1,684

More snapshots will appear as the daily collection continues.

Overview

CrackMapExec is a Python-based tool for network penetration testing, with a focus on Windows and Active Directory environments. It is intended to help security practitioners assess networks during authorized tests, bringing network and Windows-oriented workflows into one tool.

The project is archived and its maintainers say it is no longer maintained. Its documentation and usage examples are linked from the project wiki, but teams should evaluate whether the archived code suits their environment before relying on it.

Key Features

  • Focuses on penetration testing networks, including Windows environments.
  • Targets Active Directory assessment workflows.
  • Includes PowerShell-related functionality, reflected in the project topics.
  • Provides documentation and usage examples through the project wiki.
  • Is written in Python and provides Docker support.

Use Cases

  • A penetration tester assessing a Windows network during an authorized engagement can evaluate whether CrackMapExec fits the test workflow.
  • A security team reviewing Active Directory exposure can investigate the tool as part of a controlled assessment.
  • A lab or training environment can use it to explore network-pentesting workflows without putting production systems at risk.
  • A team maintaining an existing CrackMapExec-based process can assess the effort and risks of keeping that process operational after the project was archived.

What you need

Detected in the repository

  • Python (from pyproject.toml)
  • A Dockerfile, so it can run in a container
  • A test suite and automated checks on GitHub Actions

License in plain words

BSD-2-Clausepermissive

  • Commercial use: yes
  • Modify and redistribute: yes
  • You must keep: the copyright and license notice
  • Share your changes: no

A summary, not legal advice: the LICENSE file is what applies.

Getting Started

The README directs users to the official installation guide and the project wiki for setup and usage details. Check the archived GitHub repository before adopting it.

Considerations

GitHub marks the repository as archived and read-only. It has had no commits or releases in over a year, and no issues or pull requests were closed or merged in the recent measured period. Although the project has contributions from many people rather than being concentrated around one contributor, that does not change its inactive maintenance status. The README explicitly says the project is no longer maintained. The repository uses the BSD-2-Clause license, so review its terms for your intended use.

Found this useful?

Share it with someone who would like CrackMapExec.