DeathStar

DeathStar is a Python-based red-team automation project that integrates with the Empire REST API for Active Directory security assessment. Its main purpose is to demonstrate how common Active Directory misconfigurations can be chained together in automated attack-path scenarios. The project focuses on controlled assessment workflows that model privilege escalation paths in enterprise Windows environments. Version 0.2.0 introduced a full rewrite with asynchronous execution, multi-domain and multi-forest support, a plugin system, and active monitoring behavior. The tool is designed around extensibility through the Kyber Crystal plugin system, which lets researchers add custom logic. Because it automates sensitive offensive workflows, it should only be used in legal, authorized labs or professional security engagements.