shaka

Windows & Microsoft Active Directory security assessment from the terminal. Domain discovery, directory enumeration, relationship graphs, privilege analysis and evidence-driven findings with an offline simulator.

The seven stages

  • DISCOVER, discover domains, domain controllers, forest topology, and directory boundaries
  • ENUMERATE, enumerate users, groups, computers, organizational units, and trust relationships
  • GRAPH, build typed relationship graph modeling principals, group memberships, and delegation paths
  • ANALYZE, evaluate identity posture, Kerberos pre-auth, delegation configurations, and trust surfaces
  • FINDINGS, execute deterministic rule engine with fingerprint deduplication and evidence-backed severity
  • RISK, compute risk score (0-100) and risk level across directory findings
  • REPORT, render terminal tables, schema-versioned JSON, Markdown, HTML, YAML, and JSONL event streams

Authorization guarantee

shaka requires explicit authorization (--authorized / -y, config, or QYVORA_AUTHORIZED=true) before probing live Active Directory infrastructure. The built-in simulator (--sim) runs completely offline without touching a live network.

Install

curl -fsSL https://raw.githubusercontent.com/QYVORA/qyvora-shaka/main/install.sh | bash

Usage

  • shaka assess --sim
  • shaka discover --sim
  • shaka enumerate users --sim
  • shaka graph --sim
  • shaka assess --endpoint dc01:389 --user audit --password secret --authorized
  • shaka assess --sim --output json