Skip to content

v2.5.40

Choose a tag to compare

@github-actions github-actions released this 04 Nov 20:31
· 13 commits to main since this release

RustHound-CE v2.5.40

This release introduces Active Directory Web Services (ADWS) as an alternative directory collection transport to LDAP/LDAPS. ADWS communicates with domain controllers over TCP 9389 using SOAP/WS-* protocols, allowing RustHound-CE to enumerate Active Directory objects through ADWS while retaining the existing BloodHound-CE collection and output pipeline.

The implementation is based on the new Rust adws crate, which provides the ADWS protocol stack and compatibility with ldap3::SearchEntry.

Added

  • ADWS SOAP transport for Active Directory enumeration over TCP 9389, using .NET Message Framing (MC-NMF), NegotiateStream (MS-NNS) and SOAP-based WS-Enumeration/WS-Transfer.
  • CLI transport selection, allowing users to choose between LDAP/LDAPS and ADWS.
  • Integration with the adws crate, reusing the existing Active Directory object parsing, BloodHound-CE schema mapping and JSON/ZIP output pipeline.

Changed

  • Refactored the transport layer to support multiple directory communication backends without duplicating collection logic.
  • Updated LDAP transport handling and connection initialization to accommodate transport-specific configuration.
  • Integrated transport selection into the CLI, public library API and collection workflow.
  • Updated Cargo dependencies and documentation (README.md, HELP.md, ROADMAP.md).

Compatibility

  • Existing LDAP/LDAPS collection workflows remain supported.
  • ADWS requires TCP 9389 connectivity to a domain controller running Active Directory Web Services.
  • The resulting BloodHound-CE output format remains unchanged.

Full Changelog: v2.5.30...v2.5.40