ADscan 10.0.0

Added

• Password-strength auditing built into the scan. Credentials captured during a
  run (broadcast-poisoning responses, Kerberos service tickets, AS-REP hashes)
  are audited against a curated wordlist in the background while enumeration
  continues, and any recovered password is fed straight back into the attack
  path. Ships with the "ADscan AD Audit Wordlist", a 94-million-entry corpus, and
  a client-targeted wordlist generator that mines names, dates, and terms from the
  environment being assessed.
• Selectable cracking effort with realistic time estimates. A four-rung effort
  ladder (from a fast pass to a one-hour thorough run) is calibrated to the host's
  hardware so the estimated finish time is accurate before you commit, with live
  progress and ETA while it runs.
• Broadcast name-resolution poisoning capture. ADscan can passively capture
  network authentication attempts (LLMNR, NBT-NS, mDNS) as a background task to
  harvest credentials, surfaced as a finding and linked attack step. It runs with
  an explicit consent panel in interactive use and starts automatically in
  unattended scans, with an opt-out for out-of-scope or monitored engagements.
• Credential Harvest panel. A single view of every credential ADscan obtained
  during the scan (captured, cracked, and sprayed), each tagged with its privilege
  tier and what it can reach, plus an end-of-scan harvest summary and an on-demand
  harvest command.
• Privilege Blast Radius. Reports, the web platform, and the CLI now show the full
  set of assets and capabilities a single compromised account fans out to, making
  the reach of one weak credential explicit.
• Resumable scans. If a scan is interrupted (crash, disconnect, or a deliberate
  stop) ADscan offers to resume it from the last completed phase or host instead
  of starting over, and the web platform can stop a running scan gracefully and
  pick it back up.
• Background job management. A new jobs command lists long-running background
  work (poisoning capture, password cracking) and lets you review and stop it,
  with completed results surfaced at safe break points during the scan rather than
  interrupting the terminal.
• macOS and Apple Silicon support. The launcher now runs natively on macOS, and
  LITE and PRO images are published for ARM64/Apple Silicon in addition to x86-64.
• Scan configuration controls for cracking effort and poisoning, exposed both in
  the web platform and in the YAML scan-config file.
• Smoother first-run onboarding: a pre-filled workspace name, a first-run
  explainer, and an end-of-scan session rating prompt.

Changed

• Credential recovery in reports and the web platform now classifies each
  harvested account by privilege tier and reach, so a cracked or captured password
  is shown in terms of what it actually unlocks.
• Network operations that previously relied on bundled external command-line tools
  (password spraying, share enumeration, SMB/LDAP hardening checks, local
  credential verification, account cleanup) now run on ADscan's built-in engine,
  giving consistent proxy support and a smaller footprint.

Fixed

• Captured credentials are no longer lost in several edge cases: a sprayed
  credential deleted during re-verification, a captured hash dropped on a
  NetBIOS/domain-name mismatch, and a cracked password that could vanish if its
  background worker ended early.
• A best-effort file-copy step that retried against unreachable shares could stall
  and abort a long engagement; retries are now capped so the scan finishes.
• A corrupt or empty workspace file no longer breaks an existing workspace, and
  workspace writes are now atomic so an interrupted save cannot wipe collected
  data.
• Multi-domain resume now checkpoints correctly, so an interrupted scan across
  several domains can actually be resumed.
• Cross-forest and cross-realm Kerberos authentication now follows domain
  referrals correctly, including a crash on service tickets used for constrained
  delegation.
• The credential prompt now cancels cleanly on empty input, and unattended scans
  never block waiting for a prompt.
• Password-audit reporting is more accurate: an out-of-memory condition is
  reported as its own cause instead of "try a different wordlist", the patience/ETA
  notice is no longer far off, and long audit sessions are recorded reliably.
• Background cracking no longer competes with the interactive prompt for the
  terminal or for CPU, keeping the shell responsive while a crack runs.
• The Compliance page in the web platform now renders its interface text in
  English, and internal tool names no longer appear in client-facing live-scan
  output.

Removed

• The bundled external third-party command-line security tools have been removed.
  Every capability they provided is now implemented directly in ADscan's native
  engine, which also reduces image size.