Skip to content

ADscan 4.1.0

Choose a tag to compare

View all tags
@ADScanPro ADScanPro released this 02 Feb 10:36
· 72 commits to main since this release
v4.1.0
f17fa28
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's New

New Features

  • pypykatz integration: Dump hashes directly from .DMP files without leaving ADscan
  • DCSync fallback chain: When DCSync fails, automatically tries SAM, LSA, and DPAPI dump
  • WriteSPN ACL exploitation: New attack path for SPNs manipulation
  • Kerberos-first for ADCS: All ADCS enumeration and exploitation now uses Kerberos authentication
  • SeBackupPrivilege via SMB: Changed from WinRM to SMB for broader compatibility
  • Non-domain hash extraction: Regex-based extraction of local accounts from SAM dumps
  • ADCS priority check: Now checks ADCS before attempting Shadow Credentials

Improvements

  • Better PDC/domain discovery: Works reliably even with minimal initial information
  • Faster FQDN resolution: Using massdns for significantly improved speed
  • BloodHound collector resilience: Better fallbacks when LDAPS is unavailable
  • Removed public DNS resolvers: DCs are now discovered without external DNS dependencies

Bug Fixes

  • Fixed attack path execution when target belongs to a group
  • Fixed CA discovery timing issue (was discovered too late in the phase)
  • Fixed attack path search from computer accounts
  • Fixed credentials being removed on first run
  • Fixed SID mismatch bug on ESC1/ESC3/ESC4 exploitations
  • Fixed ESC3 exploitation bug
  • Fixed workspace switching when creating from existing workspace
  • Fixed ADCS discovery when NTLM is disabled
  • Fixed Domain Admin resolution (was using display name instead of sAMAccountName)

Upgrade

Existing users:

adscan install

New users:

# Download binary
wget https://github.com/ADScanPro/adscan/releases/latest/download/adscan
chmod +x adscan && sudo mv adscan /usr/local/bin/
adscan install

Stats

  • 9 bug fixes
  • 4 improvements
  • 7 new features
Assets 3
Loading