bloodyad

library2.5.4pypypiunverified

BloodyAD is an Active Directory privilege escalation Swiss army knife for Python 3.8+. Version 2.5.4 focuses on AD exploitation primitives (e.g., RBCD, DCSync, Shadow Credentials). It is actively maintained with monthly releases.

security

pip install bloodyad

github ↗homepage ↗

INSTALL

IMPORT

SIG · BLOODYAD

bloodyad

securitypythonv2.5.4

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

bloodyAD

✓ from bloodyad import bloodyAD

✗ import bloodyAD

bloodyAD is not a module but a class; direct import results in AttributeError

Initializes a bloodyAD connection to a domain controller and retrieves domain admins.

from bloodyad import bloodyAD # Connect using LDAP + authentication ad = bloodyAD( 'dc.domain.com', username='domain\\user', password='password', authentication='secure' # or 'simple', 'kerberos' ) # Example: get all domain admins admins = ad.get_admins() print(admins)

Debug

Known issues

breakingVersion 2.x dropped support for Python < 3.8 and changed the authentication parameter from a positional arg to a keyword-only argument.

fix

Update call to `bloodyAD(domain, user, password, authentication='...')`.

affects: <2.0

deprecatedThe `get_dc` method is deprecated and will be removed in v3.0. Use `domain_info` instead.

fix

Replace `ad.get_dc()` with `ad.domain_info()`.

affects: 2.5.x

gotchaLDAP connection times out if the DC is not reachable via the provided domain name. The library does not retry automatically.

fix

Ensure DNS resolution works for the domain controller. Use IP address if needed.

affects: all

breakingIn version 2.4, the class name changed from `BloodyAD` to `bloodyAD`. Old imports will break.

fix

Change `from bloodyad import BloodyAD` to `from bloodyad import bloodyAD`.

affects: <=2.3 vs >=2.4

Upgrade

Version history

2.5.4latest on PyPI · released Jan 31, 2026

Audit

Dependencies

impacketrequiredCore dependency for AD protocols (LDAP, SMB, Kerberos)

dsinternalsrequiredUsed for NTDS manipulation and password hash operations

gssapioptionalKerberos authentication on Linux

Agent activity

30 hits · last 30 days

node

Amazon

OpenAI (training)

Resources

githubhttps://github.com/CravateRouge/bloodyAD ↗

homepagehttps://github.com/CravateRouge/bloodyAD ↗