Security News > 2024 > February > SOAPHound: Open-source tool to collect Active Directory data via ADWS

SOAPHound is an open-source data collection tool capable of enumerating Active Directory environments through the Active Directory Web Services protocol.

SOAPHound is a substitute for various open-source security tools typically employed for extracting data from Active Directory via the LDAP protocol.

Instead of performing multiple LDAP queries to obtain information about different objects, it obtains all data with one query and then parses the data offline on the client side.

Finally, SOAPHound supports additional collection methods for specific internal services of interest, such as Active Directory Certificate Services and Active Directory integrated DNS records.

"SOAPHound is currently compliant with Bloodhound version 4. We plan to create a version that also supports the latest version of Bloodhound and also keep SOAPHound up to date with any new discoveries regarding abusable trust relationships within Active Directory environments. We open-sourced the tool so that additional interesting features can also be added by the community, and we would like to invite anyone with nice ideas to contribute in expanding the tool's capabilities," Karouzos explained.

Prowler: Open-source security tool for AWS, Google Cloud Platform, Azure Latio Application Security Tester: Use AI to scan your code CVEMap: Open-source tool to query, browse and search CVEs Faction: Open-source pentesting report generation and collaboration framework Adalanche: Open-source Active Directory ACL visualizer, explorer AuthLogParser: Open-source tool for analyzing Linux authentication logs DriveFS Sleuth: Open-source tool for investigating Google Drive File Stream's disk forensic artifacts Subdominator: Open-source tool for detecting subdomain takeovers EMBA: Open-source security analyzer for embedded devices.

News URL

https://www.helpnetsecurity.com/2024/02/08/soaphound-open-source-collect-active-directory-data-adws/