Locksmith2

An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers

Minimum PowerShell version

5.1

Installation Options

Owners

• jakehildreth

Copyright

(c) 2025 - 2026. All rights reserved.

Package Details

FileList

• Locksmith2.nuspec
• LICENSE
• Locksmith2.psd1
• Locksmith2.psm1
• performance.log
• QuickTest.ps1
• README.MD
• .github\FUNDING.yml
• .github\instructions\copilot-instructions.md
• .github\instructions\PowersHell.instructions.md
• .github\workflows\publish.yml
• .local\share\powershell\Modules\Locksmith2\Locksmith2.Classes.ps1
• .local\share\powershell\Modules\Locksmith2\Locksmith2.psd1
• .local\share\powershell\Modules\Locksmith2\Locksmith2.psm1
• .local\share\powershell\Modules\Locksmith2\Images\Locksmith2.png
• Artefacts\Unpacked\Locksmith2\Locksmith2.Classes.ps1
• Artefacts\Unpacked\Locksmith2\Locksmith2.psd1
• Artefacts\Unpacked\Locksmith2\Locksmith2.psm1
• Artefacts\Unpacked\Locksmith2\Images\Locksmith2.png
• Build\Build-Module.ps1
• Classes\LS2AdcsObject.ps1
• Classes\LS2Issue.ps1
• Classes\LS2Principal.ps1
• Ignore\FlattenedIssues.html
• Ignore\IssueStore.html
• Images\Locksmith2.png
• Notes\Keys.ps1
• Notes\LogoOptions.ps1
• Notes\MoreLogos.ps1
• Notes\Select-Themes.ps1
• Notes\TASKS.md
• Notes\TODO.md
• Private\Convert\Convert-IdentityReferenceToNTAccount.ps1
• Private\Convert\Convert-IdentityReferenceToSid.ps1
• Private\Convert\Expand-GroupMembership.ps1
• Private\Convert\Resolve-Principal.ps1
• Private\Data\AceDefinitions.psd1
• Private\Data\ESCDefinitions.psd1
• Private\Data\PrincipalDefinitions.psd1
• Private\Get\Get-AdcsObject.ps1
• Private\Get\Get-FlattenedIssues.ps1
• Private\Get\Get-ModuleThatLoadedThisFunction.ps1
• Private\Get\Get-RootDSE.ps1
• Private\Initialize\Initialize-AdcsObjectStore.ps1
• Private\Initialize\Initialize-DirectoryConnections.ps1
• Private\Initialize\Initialize-DomainStore.ps1
• Private\Initialize\Initialize-LS2Scan.ps1
• Private\Initialize\Initialize-PrincipalDefinitions.ps1
• Private\New\New-AuthenticatedDirectoryEntry.ps1
• Private\New\New-GCSearcher.ps1
• Private\New\New-LDAPSearcher.ps1
• Private\Set\Set-AnyPurposeEKUExist.ps1
• Private\Set\Set-AuthenticationEKUExist.ps1
• Private\Set\Set-AuthorizedSignatureNotRequired.ps1
• Private\Set\Set-AuthorizedSignatureRequired.ps1
• Private\Set\Set-CAAdministrator.ps1
• Private\Set\Set-CAAuditFilter.ps1
• Private\Set\Set-CACertificateManager.ps1
• Private\Set\Set-CAComputerPrincipal.ps1
• Private\Set\Set-CADisableExtensionList.ps1
• Private\Set\Set-CAEditFlags.ps1
• Private\Set\Set-CAInterfaceFlags.ps1
• Private\Set\Set-DangerousCAAdministrator.ps1
• Private\Set\Set-DangerousCACertificateManager.ps1
• Private\Set\Set-DangerousEditor.ps1
• Private\Set\Set-DangerousEnrollee.ps1
• Private\Set\Set-EnrollmentAgentEKUExist.ps1
• Private\Set\Set-HasNonStandardOwner.ps1
• Private\Set\Set-LowPrivilegeCAAdministrator.ps1
• Private\Set\Set-LowPrivilegeCACertificateManager.ps1
• Private\Set\Set-LowPrivilegeEditor.ps1
• Private\Set\Set-LowPrivilegeEnrollee.ps1
• Private\Set\Set-ManagerApprovalNotRequired.ps1
• Private\Set\Set-ManagerApprovalRequired.ps1
• Private\Set\Set-NoSecurityExtension.ps1
• Private\Set\Set-RequiresEnrollmentAgentSignature.ps1
• Private\Set\Set-SANAllowed.ps1
• Private\Set\Set-TemplateEnabled.ps1
• Private\Test\Test-IsBA.ps1
• Private\Test\Test-IsDA.ps1
• Private\Test\Test-IsDangerousAce.ps1
• Private\Test\Test-IsDangerousPrincipal.ps1
• Private\Test\Test-IsDomainComputer.ps1
• Private\Test\Test-IsDomainUser.ps1
• Private\Test\Test-IsEA.ps1
• Private\Test\Test-IsEnrollmentAce.ps1
• Private\Test\Test-IsLatestVersion.ps1
• Private\Test\Test-IsLocalAdmin.ps1
• Private\Test\Test-IsLowPrivilegePrincipal.ps1
• Private\Test\Test-IsModuleAvailable.ps1
• Private\Test\Test-IsModuleLoaded.ps1
• Private\Test\Test-IsPowerShellCore.ps1
• Private\Test\Test-IsStandardOwner.ps1
• Private\Test\Test-IssueExists.ps1
• Private\Test\Test-IsSupportedOS.ps1
• Private\Test\Test-IsSupportedPS.ps1
• Private\Test\Test-IsUtf8.ps1
• Private\Test\Test-IsWindows.ps1
• Private\Test\Test-IsWindowsTerminal.ps1
• Private\Test\Test-PowerShellEnvironment.ps1
• Private\UI\Read-Choice.ps1
• Private\UI\Show-IssueReport.ps1
• Private\UI\Show-Logo.ps1
• Private\Utility\Add-ToIssueStore.ps1
• Private\Utility\Expand-IssueByGroup.ps1
• Private\Utility\Expand-IssueTemplate.ps1
• Private\Utility\Get-AdcsObjectName.ps1
• Private\Utility\Get-ForestNameFromDN.ps1
• Private\Utility\Get-IssueCount.ps1
• Private\Utility\Install-NeededModule.ps1
• Private\Utility\Repair-PowerShellEnvironment.ps1
• Private\Utility\Update-DollarSignProfile.ps1
• Private\Utility\Update-OutputEncoding.ps1
• Public\Find-LS2RiskyPrincipal.ps1
• Public\Find-LS2VulnerableCA.ps1
• Public\Find-LS2VulnerableObject.ps1
• Public\Find-LS2VulnerableTemplate.ps1
• Public\Get-LS2Stores.ps1
• Public\Invoke-Locksmith2.ps1
• Public\New-LS2Dashboard.ps1
• Public\Set-LS2Credential.ps1
• Public\Set-LS2Forest.ps1
• Unused\Convert-SidToDirectoryEntry.ps1
• Unused\Show-Logo.ps1
• Unused\Write-StyledHost.ps1

Version History