Red Team Research.
Attack-chain writeups from autonomous campaigns against real Active Directory. Every step proven with captured evidence. See plain-English guides, the benchmark, and proven outcomes.
2026.06.25 active-directory→2026.04.04 active-directory→
AutoAttack vs Nessus on GOAD
AutoAttack and Nessus, same GOAD lab, same position, no credentials: Nessus returned an exposure inventory, AutoAttack a walked path to Domain Admin.
AutoAttack vs NodeZero's GOAD
AutoAttack reran NodeZero's GOAD benchmark against the hardening they published: no credentials to Domain Admin in every domain, the same chain every run.