AUTOATTACK
Deploy

Prove whether an attacker can exfiltrate your data.

Name the target (credentials, a database, a file share, a mailbox) and AutoAttack proves whether the path exists by walking it.

Deploy

proven

captured output Every credential is backed by the captured output of the step that pulled it.
set any data goal Credentials are one target. Set a database, a file share, or a mailbox as the objective instead, and AutoAttack works toward that the same way.
benchmark See the run logs →

how it reaches the data

  1. get in AutoAttack starts from a foothold with no credentials and works inward: cracking a ticket, exploiting a web application, or reusing a leaked password to gain its first access.
  2. reach the source It chains access until it reaches where the data lives: the domain controller for credentials, the database server for records, the file server for documents.
  3. pull the data With access to the source it extracts the data the way an attacker would: replicating the credential database, dumping the records, reading the files.
  4. prove it left Every extraction is captured as proof, so what the report shows is the data already in hand.

related

all All use cases
See the full benchmark