GOAD Lab Setup: Game of Active Directory

A deliberately vulnerable Active Directory environment built for hands-on attack practice. GOAD simulates a realistic domain with misconfigurations and weak security postures that reflect real-world flaws. Useful for anyone learning to exploit AD or refining red-team tradecraft without needing enterprise infrastructure.

The official project, with install guides for each lab size, is Orange-Cyberdefense/GOAD on GitHub.

Read the original on pentestguy.com

Run it safely. Deliberately vulnerable setups belong inside an isolated attack range: a host-only network with no route out, and a snapshot to roll back to.