ADscan v5.1.0

This release improves attack-path quality, cracking workflows, and overall reliability in enumeration and validation flows.

Highlights

• Improved local credential reuse logic for more accurate path generation. 🔺 🔗
• Added Domain Admin Sessions as a new attack step in attack path execution. 🔺 🔗
• Added attack path cache for faster attack path generation and better responsiveness. ⏫ 🔗

Cracking Improvements

• Expanded wordlists and improved cracking strategy by engagement type:
• CTF: rockyou.txt remains the default for speed and common CTF patterns.
• Audit: interactive wordlist selection now prioritizes stronger audit-oriented lists with better crack-rate expectations than rockyou. 🔺 🔗

Fixes

• Fixed guest session share enumeration when one share was inaccessible (previously blocked additional results). 🔺 🔗
• Fixed local admin reuse validation parsing bug. 🔺 🔗
• Fixed tool check timeout false negatives during runtime validation. 🔺 🔗
• Fixed Impacket bytecode reading issue affecting guest session flows. ⏫ 🔗
• Added SMB timeout control for local credential verification to reduce hangs. 🔗

UX Improvements

• Improved UX for computers with/without LAPS visibility and interpretation. 🔼 🔗

Notes

• No breaking changes expected in standard workflows.
• Recommended: run adscan update to apply the changes