Welcome to the vulnerable-AD-plus wiki!

Network Diagram

Computers	IP address	Gateway	Subnet Mask	DNS
You	10.10.10.10	10.10.10.1	255.255.255.0	10.10.10.1
Windows Server	10.10.10.100	10.10.10.1	255.255.255.0	10.10.10.100
Win 10	10.10.10.101	10.10.10.100	255.255.255.0	10.10.10.1

Installation

Create your own AD

Change DomainName and DomainNetbiosName

Install-ADDSForest -CreateDnsDelegation:$false -DatabasePath "C:\\Windows\\NTDS" -DomainMode "7" -DomainName "change.me" -DomainNetbiosName "change" -ForestMode "7" -InstallDns:$true -LogPath "C:\\Windows\\NTDS" -NoRebootOnCompletion:$false -SysvolPath "C:\\Windows\\SYSVOL" -Force:$true

(wget https://raw.githubusercontent.com/WaterExecution/vulnerable-AD-plus/master/vulnadplus.ps1).content | Out-File 'vulnadplus.ps1'
Import-Module .\vulnadplus.ps1
Invoke-VulnAD -UsersLimit 200 -DomainName "change.me"