Repository navigation
v2.5.40
RustHound-CE v2.5.40
This release introduces Active Directory Web Services (ADWS) as an alternative directory collection transport to LDAP/LDAPS. ADWS communicates with domain controllers over TCP 9389 using SOAP/WS-* protocols, allowing RustHound-CE to enumerate Active Directory objects through ADWS while retaining the existing BloodHound-CE collection and output pipeline.
The implementation is based on the new Rust adws crate, which provides the ADWS protocol stack and compatibility with ldap3::SearchEntry.
Added
- ADWS SOAP transport for Active Directory enumeration over TCP 9389, using .NET Message Framing (MC-NMF), NegotiateStream (MS-NNS) and SOAP-based WS-Enumeration/WS-Transfer.
- CLI transport selection, allowing users to choose between LDAP/LDAPS and ADWS.
- Integration with the
adwscrate, reusing the existing Active Directory object parsing, BloodHound-CE schema mapping and JSON/ZIP output pipeline.
Changed
- Refactored the transport layer to support multiple directory communication backends without duplicating collection logic.
- Updated LDAP transport handling and connection initialization to accommodate transport-specific configuration.
- Integrated transport selection into the CLI, public library API and collection workflow.
- Updated Cargo dependencies and documentation (
README.md,HELP.md,ROADMAP.md).
Compatibility
- Existing LDAP/LDAPS collection workflows remain supported.
- ADWS requires TCP 9389 connectivity to a domain controller running Active Directory Web Services.
- The resulting BloodHound-CE output format remains unchanged.
Full Changelog: v2.5.30...v2.5.40