The Manticore Project
Crowdsourced open source offensive and defensive security tools to heighten the security posture of the community as a whole.
A collective of Go developers and security researchers dedicated to building security tools with the shared goal of strengthening the overall security posture of the community.
Why The Manticore Project
Built by security professionals, for security professionals.
Written in Go
All tools are built in Go for high performance, easy compilation, and single-binary distribution.
Cross-Platform
Every tool works on Windows, Linux, and macOS, ensuring compatibility with your environment.
Active Directory Focused
Deep expertise in Active Directory security: Kerberos, LDAP, ACLs, GPOs, and more.
Open Source
All tools are free and open source, allowing full transparency, auditing, and community contributions.
Security Tools
Comprehensive offensive and defensive security tools built by the community, for the community.
Delegations
A tool to work with all types of Kerberos delegations (unconstrained, constrained, and resource-based constrained delegations) in Active Directory
FindGPPPasswords
A cross-platform tool to find and decrypt Group Policy Preferences passwords from the SYSVOL share using low-privileged domain accounts
LDAPWordlistHarvester
A tool that allows you to extract a client-specific wordlist from the LDAP of an Active Directory
DescribeNTSecurityDescriptor
A cross-platform tool to parse and describe the contents of a raw ntSecurityDescriptor structure
FindOldSIDTraces
A cross-platform tool to find traces of old SIDs remaining in LDAP objects of the Active Directory
goLAPS
A Go setter/getter for property ms-Mcs-AdmPwd used by LAPS
Libraries
Foundational libraries that power our security tools and enable rapid development.
Manticore
A cross platform library to write offensive and defensive security tools in Go
131winacl
A cross platform Go library to work with Windows Security Descriptors
40gopengraph
A Go library to create BloodHound OpenGraphs easily
13goopts
A cross platform Go library to parse arguments given in command line to a program
11Security Blog
Latest insights, tutorials, and research from The Manticore Project community.
Manticore v1.1.5: Bug fixes
A maintenance release hardening the LDAP and SMB clients: correct pass-the-hash on both stacks, a fixed timestamp overflow, several nil-pointer and error-propagation fixes, and configurable LDAPS certificate verification.
Read moreManticore v1.1.4: RPC improvements
Manticore v1.1.4 expands the DCE/RPC stack with full endpoint-mapper lookups, protocol tower decoding for every transport, a curated interface catalog, authenticated NTLM binds with pass-the-hash, and the MS-DRSR replication blob structures.
Read moreManticore v1.1.3: Fix ms_rrp enumeration
A small patch release that restores the MS-RRP Remote Registry enumeration fixes that had been lost from main, following the registry work in v1.1.1 and v1.1.2.
Read moreJoin Our Community
Connect with security researchers and developers from around the world.
Ready to contribute to security?
Join our collective of Go developers and security researchers. Together, we can build tools that strengthen the security posture of the entire community.