AutoAttack and Pentest Copilot on GOAD
AutoAttack chained exposed passwords and domain trusts to reach its Domain Admin goal. Compare its route with Pentest Copilot's separately published GOAD paths.
Read the comparison ↗How AutoAttack reached Domain Admin
We gave the autonomous red team agent a Domain Admin goal in public Active Directory labs. These writeups follow the credentials and footholds it used to pursue that goal.
AutoAttack vs Nessus on GOAD
AutoAttack pursued Domain Admin while Nessus inventoried vulnerabilities from the same network position, with no starting credentials. The writeup also includes a separate credentialed Nessus scan.
Read the experiment ↗AutoAttack and NodeZero on hardened GOAD
AutoAttack pursued Domain Admin across every domain in a lab configured from Horizon3's published GOAD hardening. Compare its route and timings with NodeZero's separately published result.
Read the experiment ↗The writeups
AutoAttack prepared these lab assessments. Each writeup records the starting access, environment and assigned goal alongside the results.