auto/attack

Red Team Research.

Attack-chain writeups from autonomous campaigns against real Active Directory. Every step proven with captured evidence. See plain-English guides, the benchmark, and proven outcomes.

2026.06.25 active-directory

AutoAttack vs Nessus on GOAD

Autonomous pentest vs vulnerability scanner on GOAD: no credentials for either. Nessus flagged 116 exposures in 24 min; AutoAttack reached Domain Admin in 45s.

2026.04.04 active-directory

AutoAttack vs NodeZero's GOAD

Autonomous penetration testing on GOAD: we reran Horizon3 NodeZero's benchmark. 3/3 Domain Admin in a median of 51 seconds across 10 runs.