> For the complete documentation index, see [llms.txt](https://notes.cavementech.com/pentesting-quick-reference/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.cavementech.com/pentesting-quick-reference/active-directory-pentesting/active-directory/ad-enumeration/pingcastle.md).

# PingCastle

{% embed url="<https://www.pingcastle.com/>" %}

We can  run it on a machine with <mark style="color:red;">**local admin**</mark> on a windows machine that is domain joined.

We can also run it remotely with a command prompt.

Just run it.

<figure><img src="https://755681241-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fa5rXMZ1JAQhUeS7TtZkM%2Fuploads%2FCwg9eu3IXMlmGMNRkUnl%2Fimage.png?alt=media&amp;token=95899c82-3d16-4dcf-965c-4ebfe083a4ba" alt=""><figcaption></figcaption></figure>

We will get a complete report

<figure><img src="https://755681241-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fa5rXMZ1JAQhUeS7TtZkM%2Fuploads%2FLvClDfw51nTrlHkeZStu%2Fimage.png?alt=media&amp;token=a7ebc489-8af3-4854-bfa3-1d99c7e4dde7" alt=""><figcaption></figcaption></figure>