bloodyAD
Provides Active Directory penetration testing and enumeration capabilities through a Docker-containerized wrapper around the blood
This bloodyAD MCP server by Diego Collao Albornoz provides Active Directory penetration testing and enumeration capabilities through a Docker-containerized wrapper around the bloodyAD tool. Built with FastMCP and running on Kali Linux in Docker, it offers 26 specialized tools covering AD reconnaissance (object enumeration, DNS dumping, trust mapping), privilege escalation (DCSync rights, shadow credentials, RBCD), and object manipulation (user/computer creation, group membership management, password changes) with support for various authentication methods including Kerberos. The implementation includes comprehensive setup automation scripts for Windows, Linux, and macOS that handle Docker image building, MCP configuration, and Gemini CLI integration, making it valuable for penetration testers and red team operators who need AI-assisted Active Directory attack workflows within controlled lab environments like HackTheBox.
Source
Repository: https://github.com/dcollaoa/bloodyad_mcp
Maintain bloodyAD?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[bloodyAD on getagentictools](https://getagentictools.com/mcp/dcollaoa-bloodyad-mcp?ref=badge) Related mcp
KDebug (Kubernetes) Enables natural language interaction with Kubernetes resources, allowing developers to manage clusters through conversational inte
Microsoft Fabric Integrates with Microsoft Fabric APIs to explore and document data assets including workspaces, lakehouses, warehouses, tables, an
Visio Microsoft Visio diagram generation and manipulation with Azure service icons and architecture helpers.
Package Documentation Fetcher Integrates with multiple package registries and documentation sources to provide up-to-date library information for code assistanc
Nautobot Network Infrastructure Integrates with Nautobot network infrastructure management platform, enabling querying and interaction with network data through t
Coroot Integrates with the Coroot observability platform to monitor applications in real-time, analyze logs and distributed traces, manag