Repository navigation
ADscan v1.3.4
Highlights
-
No more root-required workflow: ADscan now runs without root by default and only prompts for sudo when needed.
-
BloodHound-CE reliability boost: Better detection, startup, and conflict handling—especially around port 8080 and “installed but not running” scenarios.
-
Stronger DNS + network resilience: Improved DNS resolution (including UDP→TCP fallback) and smoother installs in restricted or slow networks.
Fixes
-
Fixed double prompt questions bug during scans.
-
Fixed LDAPConnection bug.
-
Fixed BloodHound-CE bug when it was installed but not running.
-
Fixed dhcpd error on first run after install.
-
Fixed RDP timeout exception and now runs the RDP check in the background.
-
Fixed BloodHound-CE container not running when port 8080 is already used by another service.
-
Fixed bug where ADscan didn’t check pyenv Python version if pyenv was already installed.
-
Fixed bug searching BloodHound YAML files in an incorrect location.
-
Fixed manspider log permission errors.
-
Fixed NetExec workspace conflicts.
Improvements
-
Added a port 8080 check during BloodHound-CE install/launch and prompts the user to free it.
-
Fixed official Docker installation flow.
-
Added DNS resolution fallback to TCP when UDP fails.
-
More robust PDC selection, including edge cases where the PDC internal IP appears.
-
Tuned NetExec execution: fewer threads + improved timeout handling for more stable runs.
-
ADscan now exits when
apt updatefails (instead of only warning), preventing broken dependency states. -
If batch package installation fails, ADscan now falls back to slower one-by-one installs.
-
Added a first-start tutorial and a reference to the documentation page.
-
Switched to Unbound for more robust DNS resolution management.
-
Domain discovery now retries properly (up to three attempts).
-
Fixed pyenv shims permission error.
-
Installation made more robust and efficient for slow/restricted networks.
-
Added
--fixparameter to the check command to automatically fix detected issues. -
Moved the version upgrade check to the beginning of the check command.
-
Reordered authenticated enumeration to achieve “quick wins” earlier.
Notes / Potentially Breaking Behavior
apt updateerrors now stop the process instead of continuing. This is intentional to avoid half-installed dependencies.
If you want, I can also rewrite these into a GitHub Releases-ready format (with “Added / Changed / Fixed” headings) or a shorter changelog for Discord/LinkedIn.