Skip to content

ADscan 3.1.0

Choose a tag to compare

View all tags
@ADScanPro ADScanPro released this 13 Dec 08:18
· 89 commits to main since this release
v3.1.0
58e3fff
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ADscan v3.1.0

This release focuses on finding more credentials automatically, improving the password spraying workflow, and increasing overall reliability (install, Docker, enumeration, and session handling).

Highlights

  • Automatic credential extraction from common “real-world” sources (SMB descriptions and PowerShell transcripts).
  • Smarter password spraying: when ADscan finds a valid password, it can help you search for more users reusing it.
  • Better stability in real environments: improvements across Docker, kerberoasting, RDP launching, and noisy enumeration paths.
  • More robust installation: tooling upgrades, stronger checks, and dependency fixes.

Added

  • Automatic password extraction from SMB descriptions (including null session scenarios).
  • Password extraction from PSTranscripts via WinRM.
  • Prompt/flow to re-run password spraying using discovered passwords to identify additional users.
  • Handler-based shell improvements.
  • Support for custom agents.

Changed / Improved

  • bloodhound-cli moved into an isolated environment for better consistency.
  • Enumeration: skips some low-value ACLs to reduce noise.
  • SMB share spidering + description extraction: timeouts disabled to avoid timeout-related errors (may run longer on large environments).
  • Telemetry: logging consolidated into sessions, added countries, and fixed a time synchronization issue.
  • Various UX and lab updates.

Fixed

  • Bug: null session context was not added correctly to auth context.
  • Bug: password spraying failed when the Kerberos folder was missing.
  • RID cycling: expanded the set of enumerated IDs.
  • Kerberoasting: fixed issues with preauth sessions due to async behavior.
  • BloodHound: fixed user search for users belonging to an OU.
  • False positive: unconstrained delegation on DC.
  • Bug: creating a new workspace (client/prod).
  • RDP session auto launcher issues.
  • Docker: containers not initialized when the Docker service wasn’t up; crawling failure when libmagic was missing.
  • Dependencies: fixed bloodyad minikerberos dependency error; improved robustness of installed-tools checks.

Installation / upgrade notes

  • Recommended: rerun the install/upgrade flow to pick up:
    • tool version upgrades,
    • pinned-commit installs where applicable,
    • dependency fixes (including bloodyad/minikerberos).
  • Note: with SMB spidering/description extraction timeouts disabled, runs may take longer on very large scopes—limit targets if needed.
Assets 3
Loading