Nordis Inspector is a local assessment tool for authorized Windows and Active Directory environments. It evaluates the supplied identity in a live local web dashboard.
- Inspects SMB security, shares, readable files, and exposed credential material
- Combines a default literal term list, structured regex rules, and filename signals
- Uses authenticated LDAP to separate principal capabilities from environment findings
- Supports passwords, NT hashes, Kerberos, and CCache files
./setup.sh
./run.sh
# Open one of the LAN addresses printed by the commandsetup.sh değişmeyen bağımlılıkları sonraki çalıştırmalarda yeniden indirmez ve
pip önbelleğini .pip-cache/ altında tutar. Kurulumu bilerek yenilemek için
./setup.sh --force kullanın.
To use another local port:
./run.sh --port 9000The panel listens on local IPv4 interfaces by default. To restrict it to this machine:
./run.sh --host 127.0.0.1The panel uses plain HTTP, so do not expose it to an untrusted network.
Use Nordis Inspector only against systems and data you are authorized to assess. The optional SMB write check is disabled by default. AD inspection does not modify directory objects or return readable LAPS and gMSA secret values.
MIT License. See LICENSE.